Reputation
1,549
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
9 16
Newest
 Yearling
Impact
~190k people reached

Aug
22
awarded  Yearling
Oct
16
awarded  Good Answer
Aug
22
awarded  Yearling
Jan
16
awarded  Notable Question
Oct
14
awarded  Notable Question
Aug
22
awarded  Yearling
Jul
18
awarded  Nice Answer
May
16
awarded  Good Question
Jan
17
awarded  Nice Answer
Oct
9
awarded  Popular Question
Aug
22
awarded  Yearling
Jun
30
awarded  Popular Question
Jun
19
awarded  Nice Question
Apr
11
awarded  Self-Learner
Apr
9
revised Is it alright to tell everyone your encryption information?
typo
Mar
30
answered Is it alright to tell everyone your encryption information?
Jan
17
answered Is it a security risk to remind users of the password requirements at login?
Jan
14
comment Best password strength checker
I like the KC idea, but unfortunately, KC is not computable (see en.wikipedia.org/wiki/…), whatever the string length. Compression algorithms provide an upper bound on KC - the trick is to choose a good compression algorithm. We'd want the algorithm to "know" all the dictionary words, as well as how to make l33t, suffixed, etc. combinations. That algorithm is basically JtR, isn't it, where the compressed result is the index in the list of attempted passwords?
Jan
14
comment Best password strength checker
But (like most of the others) any l33t-speak defeats its "common passwords" list, and it also doesn't use diagraph/trigraph frequencies for "english-like" character sequences.
Jan
12
answered How can I protect a client's mirror of the server's database?