11,811 reputation
23784
bio website neal.mcburnett.org
location Boulder, CO
age
visits member for 3 years, 8 months
seen Jul 19 at 15:22

I like to engage in "Technology Serving Community" via free software.

Consultant, Ubuntu member, Wikipedia contributor since 2002, ElectionAudits developer, Boulder Community Network co-founder, Internet2 consultant for IDtrust, author of pgpstat, Android enthusiast, ex-Bell Labs web/security/standards maven....

See my web site for way more: http://neal.mcburnett.org/


Jul
19
reviewed Close How to compare two Truecrypt volumes
Jul
19
reviewed Leave Open How can my employer be a man-in-the-middle when I connect to Gmail?
Jul
19
comment What is a good analogy to explain to a layman why passwords should be hashed?
You're confusing hashing with encryption. If you can read the password, you've failed in protecting your user's private information, and put yourself at great legal risk.
Jul
19
comment What is a good analogy to explain to a layman why passwords should be hashed?
+1 for Plain Text Offenders - showing your boss that the company would get ridiculed in public, by a site which does a great job of explaining and defending why they do that, seems pretty easy. Especially since it is so easy to implement good practices
Jul
18
revised How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?
update 7 india cca issues
Jul
17
comment How to memorise multiple xkcd-style passwords for particular services?
see also How to help users manage password portfolios based on risks of compromise?
Jul
17
comment How to memorise multiple xkcd-style passwords for particular services?
Good answer! And I'm glad to see you answering the question here :) How to help users manage password portfolios based on risks of compromise?
Jul
17
asked How to help users manage password portfolios based on risks of compromise?
Jul
2
awarded  Curious
Jul
1
awarded  Notable Question
Jun
10
awarded  Custodian
Jun
10
reviewed Approve suggested edit on Is this verbose error message on the DOT website a security issue?
Jun
10
reviewed No Action Needed cURL cert validation with curlopt_cainfo not working
Jun
10
reviewed Close Elliptic curve cryptography and key sharing
Jun
6
awarded  Generalist
May
6
awarded  Popular Question
Apr
28
awarded  Good Answer
Apr
27
awarded  Good Question
Mar
17
revised How easily are keyloggers foiled?
fix typo
Mar
2
awarded  Popular Question