1,464 reputation
816
bio website
location
age
visits member for 3 years, 3 months
seen May 20 '12 at 21:36

Oct
16
awarded  Good Answer
Aug
22
awarded  Yearling
Jan
16
awarded  Notable Question
Oct
14
awarded  Notable Question
Aug
22
awarded  Yearling
Jul
18
awarded  Nice Answer
May
16
awarded  Good Question
Jan
17
awarded  Nice Answer
Oct
9
awarded  Popular Question
Aug
22
awarded  Yearling
Jun
30
awarded  Popular Question
Jun
19
awarded  Nice Question
Apr
11
awarded  Self-Learner
Apr
9
revised Is it alright to tell everyone your encryption information?
typo
Mar
30
answered Is it alright to tell everyone your encryption information?
Jan
17
answered Is it a security risk to remind users of the password requirements at login?
Jan
14
comment Best password strength checker
I like the KC idea, but unfortunately, KC is not computable (see en.wikipedia.org/wiki/…), whatever the string length. Compression algorithms provide an upper bound on KC - the trick is to choose a good compression algorithm. We'd want the algorithm to "know" all the dictionary words, as well as how to make l33t, suffixed, etc. combinations. That algorithm is basically JtR, isn't it, where the compressed result is the index in the list of attempted passwords?
Jan
14
comment Best password strength checker
But (like most of the others) any l33t-speak defeats its "common passwords" list, and it also doesn't use diagraph/trigraph frequencies for "english-like" character sequences.
Jan
12
answered How can I protect a client's mirror of the server's database?
Jan
12
comment How to demo a new 0-day security product?
Sure -- "reasonable argument" and "compelling demo" are far from being synonyms. Depends on your audience -- some will be impressed by animated powerpoints, others by a thorough exposition of the approach used. YMMV