Reputation
606
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 13
Newest
 Yearling
Impact
~50k people reached

Apr
18
comment How to avoid ransomware
Be careful about running bad stuff in a sandboxed browser. While it may not permanently write (protects you against changed data, as the OP has asked), it still may steal private information.
Apr
12
comment Recovery plan in case of lost Android smartphone with Google Authenticator?
I have done the solution from the first paragraph: Printed out all those QR Codes and put them in a safe place. After an intentional phone reset, I successfully recreated all those 2-Factor logins in Google Authenticator.
Apr
7
comment Whatsapp encryption keys
@M'vy Did anyone say they trusted WhatsApp even before?
Mar
17
comment Why would a website that resets your password to one of their choice be considered a plain text offender?
Because exactly this, they email your password in plain text.
Jan
22
comment How Should WiFi Passwords be securely stored on IOT (embedded) devices?
You may want to listen to the podcast "Security Now", by Steve Gibson, Episode 543, where Steve talks about the Ring Doorbell IoT device. Here's the transscript, with links to audio: grc.com/sn/sn-543.pdf Search for "physical access". It's about a quarter in.
Jan
21
awarded  Yearling
Jan
12
revised Is it possible for my password to have more than one password combination?
improved formatting
Jan
12
suggested approved edit on Is it possible for my password to have more than one password combination?
Dec
22
comment Purely as a technical matter, is it possible to make otherwise-strong encryption implemetations that contain governmental backdoors?
You may want to have a listen to the "Security Now" podcast, especially Episode 491 at grc.com/sn/sn-491.htm and Episode 506 at grc.com/sn/sn-506.htm. They both talk about backdoors for governement use.
Dec
21
comment How to find out whether an ISP adds a perma-cookie to my requests?
Wow, nice answer. Although, I am not a legal person, and was more interested in technical solution . +1 Anyway.
Dec
14
comment Passwordless website authentication scheme
Your question sees to be well thought out. For a quick reality check, I would like to mention SQRL. This too, is a password-less authentication protocol, you can compare your solution with.
Dec
12
awarded  Nice Answer
Dec
9
comment Why would a spammer try to get a (normal) image of mine?
@Mawg Convenience - and they have a matching age value.
Dec
9
answered Why would a spammer try to get a (normal) image of mine?
Oct
29
comment Is a file shredder/secure erase necessary when you have full disk encryption turned on?
Because you are mentioning it, the RAM disk option seems safest to me. Anything will be gone at the next reboot, at least.
Oct
29
comment why don't we measure the strength of crypto against the cost it would take to crack it?
Very intersting question. @puzzlepalace Cost will change, but so does time with better hardware.
Aug
20
revised Can a QR code steal my mobile's data?
fixed language, clarified title
Aug
20
suggested approved edit on Can a QR code steal my mobile's data?
Feb
19
revised What is a good way to authenticate a user to websites and applications with a smart phone?
more info about the standard
Feb
12
revised What is a good way to authenticate a user to websites and applications with a smart phone?
formatted