| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 6 months |
| seen | Jun 11 at 4:55 | |
| stats | profile views | 66 |
|
Sep 28 |
comment |
Security fields: AppSec vs. InfoSec vs. NetSec, etc @Iszi: What's the difference? |
|
Sep 6 |
comment |
Can apps be trusted when requesting your credentials? Are you sure it was actually asking for your Google account password itself rather than redirecting you to Google to request permission via OAuth (see answers below)? |
|
Aug 3 |
comment |
self-signatures using SHA1 I thought I'd followed all the "best practice instructions" for a secure key, but I apparently hadn't. Following the steps here to generate a new key resulted in one that passed all the tests from the site in my original question. |
|
Jul 25 |
comment |
Managing website passwords for small team @AviD: Well, the policy including its implementation. Some answers wouldn't involve products (e.g. use the same password everywhere, but change it often), others would (e.g. use a password manager that accommodates multiple users sharing passwords). |
|
Jul 21 |
comment |
Password manager vs remembering passwords @Rakkhi: Thanks! Didn't check out the enterprise edition. |
|
Jul 21 |
comment |
Managing website passwords for small team I just looked at KeepassX and some things look a little outdated, is it still under active development? |
|
Jul 20 |
comment |
Password manager vs remembering passwords @Rakkhi: Can you clarify how you can remotely destroy the contents of an IronKey? |
|
Jul 18 |
comment |
Cell phone voice mail hacking Just found this useful post as well. |
|
Jul 11 |
comment |
Security of passphrase-protected private key So for a RSA private key generated using ssh-keygen with default options and entering a long passphrase when prompted, how do these issues come into play? In other words, are we talking about a couple weeks on a home computer, or 5-10 years with a huge network of computers, or what? |
|
Jul 10 |
comment |
Attack where browser URL appears valid Thanks. I've edit my question to clarify I'm asking about either HTTP or HTTPS. |
|
Jul 10 |
comment |
RSA vs. DSA for SSH authentication keys Can you elaborate on the risk of using an RSA key on the server side? |
|
Jul 8 |
comment |
Security of passphrase-protected private key I'm thinking about generating an RSA keypair using ssh-keygen with default options and entering a passphrase when prompted. But I'd be curious about the answer for other common approaches as well. |
|
May 12 |
comment |
Facebook spam / phishing attempt? +1 for the comment comment. |