204 reputation
14
bio website
location
age
visits member for 2 years, 6 months
seen Aug 13 at 18:50

May
17
comment Touch Screen Password Guessing by Fingerprint Trace
There are a few companies that make keypads with LEDs in the keys that do exactly what you described. The first time I saw one was in the 1990s, so it's not a new thing. I have a friend who founded a (now-defunct) company called GrIDSure that, inspired by those locks, had a system where your PIN was a pattern and randomization of the keypad served turned it into a OTP.
Apr
16
awarded  Yearling
Jan
14
comment Are passwords stored in memory safe?
You might find some useful background in this question on Programmers.
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
@loneboat: Good point. Still, if there were enough to merit having to wag his finger at his users, his security posture isn't very strong.
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
@Iszi: Well, sure, but that isn't the point. The OP's VP IT has his shorts in a knot because he thinks 100% of the passwords on his system are "weak." If the percentage is that high, it means he's not even doing the basics to weed out the truly easy ones.
Nov
28
comment VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
I think I'd ask why their systems are configured in a way that allows passwords they consider weak.
Nov
19
awarded  Commentator
Nov
19
comment What sort of security method is this called (if it has a name)?
This would be better on Security.
Oct
5
awarded  Critic
Jul
3
comment Implications of securing data in RAM
@herby: Having no swap solves that problem.
Jul
2
awarded  Supporter
Jun
29
comment How does small dish satellite secure their signal?
Because satellite TV isn't a two-way medium.
Jun
28
comment Ingress RFC1918 spoofing: How to handle it?
When an ISP and a customer enter into a contract that says the customer waives all rights to sue the ISP for damages relating to traffic delivered to his premesis, there's no legal theory involved. If the customer doesn't like the terms, he doesn't sign the contract and doesn't get any service.
Jun
28
comment How to trace email?
@jippie: A number of MTAs exhibit the behavior you describe, but RFC 2822 doesn't mandate it.
Jun
26
comment Ingress RFC1918 spoofing: How to handle it?
@curiousguy: Illegal how? ISPs are under no legal or technical obligation to filter that traffic, nor do most of their contracts for unmanaged transit require it.
Jun
26
comment Ingress RFC1918 spoofing: How to handle it?
@curiousguy: As far as I know, there are no laws on the books in the U.S. that explicitly make the carrier liable, nor are there any that absolve them of liability. "Runs the risk" means some customer and his lawyer could bring a civil suit and win. I spent the latter half of the 1990s at a Tier-1 ISP and had ample opportunity to become familiar with the reasons our legal department had for putting what it did in the contracts we had with our customers.
Apr
13
comment Is there a crypto system which detects decryption somewhere between sender and receiver?
I've posted an answer that answers your question.
Apr
13
answered Is there a crypto system which detects decryption somewhere between sender and receiver?
Apr
12
comment Is there a crypto system which detects decryption somewhere between sender and receiver?
What would happen if the intercepted message was stored for awhile and decrypted after it had arrived at B?
Apr
7
comment What should I do when my boss asks me to fabricate audit log data?
Entrapment would require that the OP's boss was a law enforcement officer.