1,986 reputation
1828
bio website en.wikipedia.org/wiki/…
location
age
visits member for 3 years, 8 months
seen Aug 14 at 12:29

Jul
2
awarded  Curious
Jul
2
awarded  Inquisitive
Jun
24
awarded  Popular Question
May
7
awarded  Popular Question
Apr
23
awarded  Famous Question
Apr
10
awarded  Notable Question
Mar
14
revised How to scan Javascript for malicious code?
added 2 characters in body
Feb
17
awarded  Popular Question
Jan
14
accepted What is the strength of the key derivation function on Android device encryption?
Jan
14
comment What is the strength of the key derivation function on Android device encryption?
"If the password is a four-digit PIN code" You can delete that sentence, it won't be. (except maybe on older Android versions?)
Jan
14
comment What is the strength of the key derivation function on Android device encryption?
I have set up encryption my phone (Note II) which includes Android 4.3. It requires that the lock screen be configured with a password. Password requirements are: at least 1 letter, at least 1 number, at least 6 characters.
Jan
13
asked What is the strength of the key derivation function on Android device encryption?
Jan
7
comment If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type?
"lose against physical or software attackers" I don't see how this relates. Where does it become easier to attack when I use encrypted password memory? "simple spoof...saved password field" That wouldn't work on Master Password Protected memory.
Jan
6
comment If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type?
Please limit the answer to items that change between Remembering Passwords With Master Password and Entering The Password Manually Each Time.
Jan
6
comment If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type?
"In case of key logger, master password does not really protect against them, because key logger will then record master pass." What I meant was, it prevents the real password from getting leaked to the keylogger. The master password is not useful on its own unless the data files are captured. Granted, the keylogger could also get the data files, and everything else. Just speaking of simple keyloggers.
Jan
6
asked If I use a good Master Password in Firefox, is security improved when I Remember Passwords instead of re-type?
Jan
6
accepted Sharing login session from one website to another?
Jan
6
comment Sharing login session from one website to another?
"Using something like oauth would probably be easier and safer." Can you outline how that would work, how it would be better or different from what I proposed? That way I know I'm on the same page.
Jan
6
comment Sharing login session from one website to another?
"a system that relies on trusted communication between the two servers rather than a string to validate the session" Well, the system I outline does rely on trusted communication between the two servers (notify the second website, is done server to server), the random string is used to identify the user, since the cookie cannot be accessed by the second website, the string in the URL is used instead. If you have a better idea, then please clarify?
Jan
6
asked Sharing login session from one website to another?