Reputation
1,578
Next privilege 2,000 Rep.
Edit questions and answers
Badges
5 11
Newest
 Enlightened
Impact
~105k people reached

  • 0 posts edited
  • 0 helpful flags
  • 20 votes cast
Nov
28
awarded  Enlightened
Nov
27
awarded  Nice Answer
Mar
30
awarded  Yearling
Jan
26
awarded  Good Answer
Dec
4
comment Soundness of GRC.com Haystack padding concept
@Iszi True, if your passwords follow a specific pattern
Dec
4
revised Soundness of GRC.com Haystack padding concept
minor grammar
Dec
4
comment Soundness of GRC.com Haystack padding concept
@iszi Note that Kerchoff's principle is talking about everything known except the key, which in this case is the password, so it doesn't really apply here.
Dec
4
answered Soundness of GRC.com Haystack padding concept
Jul
28
awarded  Nice Answer
Mar
30
awarded  Yearling
Jan
7
comment Windows privileges to escalate?
SeLoadDriverPrivilege and SeSecurityPrivilege are also sensitive. But really a skilled attacker could potentially leverage almost any privilege to at least get closer to admin access.
Jan
7
answered Is data exposed in a CSRF attack?
Jan
7
answered What datastructure would/have you used to store ACLs within a hybrid ACL/RBAC system?
Jun
3
awarded  Nice Answer
Apr
29
awarded  Nice Answer
Mar
30
awarded  Yearling
Dec
21
comment Is my developer's home-brew password security right or wrong, and why?
Yes you can write your own, but most people who think they are qualified to write their own are not qualified to write their own. It's easy to judge how smart we are, but difficult to judge how dumb we are.
Dec
21
answered Are we concentrating too much on password complexity?
Dec
19
answered Is my developer's home-brew password security right or wrong, and why?
Dec
3
comment Updated list of bad/overused passwords
As for my list at xato.net, I do keep collecting passwords every day. I am currently working on improving my parser but as soon as I finish that I have a few gigabytes of passwords dumps to process. The fact is, however, that the top 1,000 passwords lists have hardly changed much over the last 20 years.