348 reputation
29
bio website
location
age
visits member for 2 years, 7 months
seen yesterday

Older than dirt. I got t-shirts older than you, kiddo.


1d
comment Sequential password updates
Allow "pass phrases" of arbitrary length and users will be less inclined to play games with the sequentially modified passwords.
Oct
25
comment Is it even possible to hack a television channel?
I'm pretty sure they did it on Mission Impossible once.
Oct
16
comment What is your way to create good passwords that can actually be remembered?
My "cheat", to generate apparently complex passwords that are easily remembered, is to start at one key and move diagonally. Eg, 1qazSE$rfv. You can change how you shift, do zig-zags, etc. Just avoid horizontal runs, since keyboard complexity rating algorithms sniff out those and reject them.
Oct
16
comment How to explain to a customer that spamfilters don't catch everything
There are some spam filters that are exceptionally good. The filter on the ieee.org mail forwarding service lets remarkably little spam through, but has only very rarely appeared to reject legitimate mail. Others I've experienced are virtually worthless -- rejecting more legitimate mail than spam.
Oct
8
comment Is it more secure to apply updates as soon as they get released?
Apply the fixes after they're stable but before any exploits occur.
Sep
24
awarded  Autobiographer
Sep
24
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
Is my password sent to Paypal? Yes, but by way of Russian hackers, so it's guaranteed safe. ;)
Jun
29
comment Can't brute force password cracking somehow be throttled?
I've run into several web sites where, after a failed attempt, each successive try takes longer and longer. But note that throttling/lockout strategies are not very robust in the face of a bot attack.
Jun
29
comment Why are brute-force password-cracking attacks not automatically detected and thwarted?
Along with everything else, keep in mind that if a baddie has a bot network they can make the attempt through multiple bots, so that no single IP address racks up too many failed attempts.
Apr
30
revised What is the point of spam like this?
added 330 characters in body
Apr
15
awarded  Commentator
Apr
15
comment Are there “secure” languages?
At one time Java sort of fit this description, but (beginning roughly with "reflections") it got to be too complex to verify as being "secure" in any non-trivial context.
Apr
7
comment Why did Java (JRE) vulnerabilities peak in 2012-2013?
My impression is that more and more ill-advised functionality is crammed into each successive release.
Dec
24
revised What is the point of spam like this?
added 893 characters in body
Dec
20
awarded  Popular Question
Dec
20
awarded  Good Question
Jul
7
revised What is the point of spam like this?
Update/comment
May
2
awarded  Nice Question
Apr
3
comment Is there a spam storm?
Thanks for that last bit. It's interesting how the new spam has successfully avoided the filters like that (when previously the IEEE spam filters worked quite well, compared to my wife's service). But, interestingly, after I marked a bunch of these things "Spam" in Thunderbird it started filtering them pretty aggressively.
Apr
2
awarded  Supporter