397 reputation
210
bio website
location
age
visits member for 3 years, 1 month
seen Mar 30 at 1:24

Older than dirt. I got t-shirts older than you, kiddo.


Mar
3
comment Why is my debugger detected as a Trojan by anti-virus software?
I did have a problem with an NT/Nokia development kit, on Vista. The built-in MS virus detection (or was it Kaspersky?) was constantly removing pieces of the debugger. Finally figured out which knobs to turn. Can't tell you more since it's been about 4 years.
Feb
13
awarded  Critic
Feb
13
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
@gowenfawr - One simply needs to know that you count the words in the lead soccer (football) article on the BBC sports site, use that as an index into an article on CNN to get the ID of the specific YouTube video and the offset into it for starting. And, of course, run the data through a reasonably good hash algorithm before using it as a pad.
Feb
13
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
There is an infinite supply of one-time pads on YouTube.
Jan
21
comment How is hashing safe if a given string always generates the same hash?
Hashing is used for many things besides passwords. When used to obscure passwords additional precautions must be taken to have a secure scheme.
Nov
26
comment Can a lock picker slowly undermine the security of a deadbolt door?
A shield fixed to the door that made you have to reach up under the shield to insert a key would make picking much more difficult.
Nov
26
comment Can a lock picker slowly undermine the security of a deadbolt door?
Among other things there is a non-trivial danger that the guy will jam the lock (break off a pick inside, etc), so I hope there are alternate ways to gain entry to the area.
Nov
8
comment Do we really need a long and complicated password for websites?
It would be interesting to see some credible analysis of how many actual exposures/penetrations are due to weak passwords, vs all the other holes in security. It's not clear that the million-customer penetrations at Target, Home Depot, et al were due in any way to weak passwords.
Nov
5
comment Do we really need a long and complicated password for websites?
I'll agree with the first part, but a password manager doesn't really solve anything.
Nov
5
comment Do we really need a long and complicated password for websites?
There is no good answer. Unfortunately, random passwords (eg, "pl3sqzjwAb") tend to be hard to remember and type. Most people would probably be happier with "pass phrases", but many sites will not allow them, for various reasons, good and bad.
Nov
4
comment Is blocking a country's access to a website a good measure to avoid hackers from that country?
This could be a (botched) attempt by the Venezuelan powers that be to implement a "Great Firewall of China" type thing. (Though more likely that someone didn't pay the rent on the trunk line or some such.)
Oct
30
comment Why are drives overwritten three times when being disposed of?
I think several studies have shown that a single overwrite, if it is complete, is sufficient to protect against anyone other than the NSA. And doing further overwrites adds little.
Oct
28
comment Sequential password updates
Allow "pass phrases" of arbitrary length and users will be less inclined to play games with the sequentially modified passwords.
Oct
25
comment Is it even possible to hack a television channel?
I'm pretty sure they did it on Mission Impossible once.
Oct
16
comment What is your way to create good passwords that can actually be remembered?
My "cheat", to generate apparently complex passwords that are easily remembered, is to start at one key and move diagonally. Eg, 1qazSE$rfv. You can change how you shift, do zig-zags, etc. Just avoid horizontal runs, since keyboard complexity rating algorithms sniff out those and reject them.
Oct
16
comment How to explain to a customer that spamfilters don't catch everything
There are some spam filters that are exceptionally good. The filter on the ieee.org mail forwarding service lets remarkably little spam through, but has only very rarely appeared to reject legitimate mail. Others I've experienced are virtually worthless -- rejecting more legitimate mail than spam.
Oct
8
comment Is it more secure to apply updates as soon as they get released?
Apply the fixes after they're stable but before any exploits occur.
Sep
24
awarded  Autobiographer
Sep
24
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
Is my password sent to Paypal? Yes, but by way of Russian hackers, so it's guaranteed safe. ;)
Jun
29
comment Can't brute force password cracking somehow be throttled?
I've run into several web sites where, after a failed attempt, each successive try takes longer and longer. But note that throttling/lockout strategies are not very robust in the face of a bot attack.