178 reputation
4
bio website
location
age
visits member for 2 years, 5 months
seen Jul 21 at 5:59

Apr
3
comment Forgotten password or reset link, which is more secure to email?
I'd really like to know peoples opinion of sending a plain text, freshly generated, one use password, instead of a reset link. A large ish organization just lost my details and I had to use the recovery function that worked like that, they sent me an email with a password (6K$NHw) that I could use to login, but then the only option was setting a new password. It reminded me of stack exchanges " Here's your password: wizard` Just kidding!"
Mar
27
awarded  Teacher
Mar
27
answered Is it possible to turn a computer into a bomb?
Feb
27
comment Using a weak password on a truecrypt volume
I think this answers the technical side of the question. I wasn't sure of the math on just how much easier it would be to brute force a short password compared to a longer one or a key file. I also like the last line as it describes what my sort of ethical question was better than my attempt.
Feb
27
awarded  Supporter
Feb
27
awarded  Scholar
Feb
27
accepted Using a weak password on a truecrypt volume
Feb
27
comment Using a weak password on a truecrypt volume
I think I butchered that old saying, locks keep out only the honest. If I found a USB key I might have a look at the contents, but if it came to trying to brute force an encrypted file I'd probably just wipe it. That is if i couldn't return the key to it's owner (Does anyone else put a .txt with their email address on USB keys? I know about the risk of attacks from people leaving infected USB sticks outside of interesting workplaces, but people still must get curious)
Feb
27
comment Using a weak password on a truecrypt volume
I was more thinking along the lines of my laptop being completely not secure. I does have a domain login password, but really running XP with no full drive encryption doesn't fill me with confidence. If someone had the need they could easily steal the laptop any documents on it, with some time (windows exploits, hardware mods). But doing so would be wrong or illegal. Picking up a USB and having a look at whats lying around doesn't seem to me as wrong.
Feb
27
awarded  Student
Feb
27
asked Using a weak password on a truecrypt volume