1,885 reputation
31128
bio website
location
age
visits member for 3 years, 4 months
seen Apr 9 at 15:52

Sep
28
comment Security fields: AppSec vs. InfoSec vs. NetSec, etc
@Iszi: What's the difference?
Sep
6
comment Can apps be trusted when requesting your credentials?
Are you sure it was actually asking for your Google account password itself rather than redirecting you to Google to request permission via OAuth (see answers below)?
Aug
3
comment self-signatures using SHA1
I thought I'd followed all the "best practice instructions" for a secure key, but I apparently hadn't. Following the steps here to generate a new key resulted in one that passed all the tests from the site in my original question.
Jul
25
comment Managing website passwords for small team
@AviD: Well, the policy including its implementation. Some answers wouldn't involve products (e.g. use the same password everywhere, but change it often), others would (e.g. use a password manager that accommodates multiple users sharing passwords).
Jul
21
comment Password manager vs remembering passwords
@Rakkhi: Thanks! Didn't check out the enterprise edition.
Jul
21
comment Managing website passwords for small team
I just looked at KeepassX and some things look a little outdated, is it still under active development?
Jul
20
comment Password manager vs remembering passwords
@Rakkhi: Can you clarify how you can remotely destroy the contents of an IronKey?
Jul
18
comment Cell phone voice mail hacking
Just found this useful post as well.
Jul
11
comment Security of passphrase-protected private key
So for a RSA private key generated using ssh-keygen with default options and entering a long passphrase when prompted, how do these issues come into play? In other words, are we talking about a couple weeks on a home computer, or 5-10 years with a huge network of computers, or what?
Jul
10
comment Attack where browser URL appears valid
Thanks. I've edit my question to clarify I'm asking about either HTTP or HTTPS.
Jul
10
comment RSA vs. DSA for SSH authentication keys
Can you elaborate on the risk of using an RSA key on the server side?
Jul
8
comment Security of passphrase-protected private key
I'm thinking about generating an RSA keypair using ssh-keygen with default options and entering a passphrase when prompted. But I'd be curious about the answer for other common approaches as well.
May
12
comment Facebook spam / phishing attempt?
+1 for the comment comment.