1,224 reputation
315
bio website
location
age
visits member for 1 year, 9 months
seen May 20 '12 at 21:36
stats profile views 56

May
16
awarded  Good Question
Jan
17
awarded  Nice Answer
Oct
9
awarded  Popular Question
Aug
22
awarded  Yearling
Jun
30
awarded  Popular Question
Jun
19
awarded  Nice Question
Apr
11
awarded  Self-Learner
Apr
9
revised Is it alright to tell everyone your encryption information?
typo
Mar
30
answered Is it alright to tell everyone your encryption information?
Jan
17
answered Is it a security risk to remind users of the password requirements at login?
Jan
14
comment Best password strength checker
I like the KC idea, but unfortunately, KC is not computable (see en.wikipedia.org/wiki/…), whatever the string length. Compression algorithms provide an upper bound on KC - the trick is to choose a good compression algorithm. We'd want the algorithm to "know" all the dictionary words, as well as how to make l33t, suffixed, etc. combinations. That algorithm is basically JtR, isn't it, where the compressed result is the index in the list of attempted passwords?
Jan
14
comment Best password strength checker
But (like most of the others) any l33t-speak defeats its "common passwords" list, and it also doesn't use diagraph/trigraph frequencies for "english-like" character sequences.
Jan
12
answered How can I protect a client's mirror of the server's database?
Jan
12
comment How to demo a new 0-day security product?
Sure -- "reasonable argument" and "compelling demo" are far from being synonyms. Depends on your audience -- some will be impressed by animated powerpoints, others by a thorough exposition of the approach used. YMMV
Jan
11
answered How to demo a new 0-day security product?
Dec
3
awarded  Nice Answer
Nov
27
answered License key / Serial number generator and checker
Oct
21
awarded  Nice Question
Sep
26
awarded  Citizen Patrol
Sep
23
answered Is this much distrust really necessary?