network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 2 months |
| seen | May 13 at 14:37 | |
| stats | profile views | 45 |
|
Feb 1 |
revised |
Banning specific passwords? added 61 characters in body |
|
Feb 1 |
comment |
Banning specific passwords? The use of words common enough to be blacklisted by themselves in a much stronger password is a legitimate concern; perhaps this could be part of a "soft" analysis and considered in combination with Shannon entropy score. |
|
Feb 1 |
comment |
Banning specific passwords? In the context of my specific scenario, I'm writing in-house software to be used by employees; while there are "competitors" for the types of systems I write, we stopped using the primary one a long time ago. Good point for a web app or retail software developer though. |
|
Feb 1 |
revised |
Banning specific passwords? added 23 characters in body |
|
Feb 1 |
asked | Banning specific passwords? |
|
Feb 1 |
comment |
what are good requirements for a password No password complexity-related question can be answered without mentioning the XKCD #936. |
|
Feb 1 |
revised |
Are you aware of any CEO that went to jail because of Security Flaws? added 860 characters in body |
|
Feb 1 |
comment |
Are you aware of any CEO that went to jail because of Security Flaws? While true, that situation is less about having a security flaw and more about using it. Having, knowing about and not fixing a security flaw that results in a theft is a civil liability. Using a security flaw to commit that theft yourself is a criminal offense. The NotW hackers didn't expose the security flaw; they exploited it. |
|
Feb 1 |
revised |
Are you aware of any CEO that went to jail because of Security Flaws? added 241 characters in body |
|
Feb 1 |
revised |
Are you aware of any CEO that went to jail because of Security Flaws? added 241 characters in body |
|
Feb 1 |
answered | Are you aware of any CEO that went to jail because of Security Flaws? |
|
Jan 31 |
revised |
Salted hashes vs HMAC? added 46 characters in body |
|
Jan 31 |
revised |
Is it possible to create a self signed certificate authority? deleted 408 characters in body |
|
Jan 31 |
answered | AES CBC padding when the message length is a multiple of the block size |
|
Jan 31 |
comment |
Where is the limit between an attacker and a victim (zombie) in a DDoS attack Well if it's a DDoS (Distributed Denial of Service) then yours is not the only machine involved in the attack. While there are "unintentional DDoS" such as the "Slashdot effect", if I'm getting a SYN flood from thousands of different IPs I'm going to assume there's a puppeteer pulling the strings. |
|
Jan 30 |
accepted | Recipient non-repudiation in secure e-mail transport |
|
Jan 30 |
revised |
Principle of asymmetric algorithm in plain english deleted 1 characters in body |
|
Jan 30 |
answered | Salted hashes vs HMAC? |
|
Jan 30 |
comment |
Salted hashes vs HMAC? "several times" - more like several thousand times. Good answer though, as always. |
|
Jan 25 |
revised |
How to implement a Web of Trust? added 4 characters in body |
