2,196 reputation
31232
bio website
location
age
visits member for 3 years, 9 months
seen Sep 10 at 4:24

Sep
28
asked Security fields: AppSec vs. InfoSec vs. NetSec, etc
Sep
19
awarded  Nice Question
Sep
14
accepted Brute-force heuristics used in password cracking
Sep
6
comment Can apps be trusted when requesting your credentials?
Are you sure it was actually asking for your Google account password itself rather than redirecting you to Google to request permission via OAuth (see answers below)?
Sep
2
accepted Attack vectors for brute-forcing website passwords
Sep
2
accepted Password entropy in layman's terms
Aug
31
awarded  Analytical
Aug
30
revised Passwords - any statistics on user behavior?
+ "from Troy Hunt"
Aug
29
asked Attack vectors for brute-forcing website passwords
Aug
29
asked Brute-force heuristics used in password cracking
Aug
29
answered Passwords - any statistics on user behavior?
Aug
29
asked Password entropy in layman's terms
Aug
18
accepted Security of LastPass + YubiKey
Aug
3
comment self-signatures using SHA1
I thought I'd followed all the "best practice instructions" for a secure key, but I apparently hadn't. Following the steps here to generate a new key resulted in one that passed all the tests from the site in my original question.
Aug
3
accepted self-signatures using SHA1
Aug
3
awarded  Teacher
Aug
3
answered What are some good website security scanning solutions?
Aug
2
accepted What's the difference between SSL, TLS, and HTTPS?
Aug
2
accepted Managing website passwords for small team
Aug
1
revised Are there any independent organizations doing (publicly available) IT security research?
linkify URLs