Reputation
1,418
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 11 25
Impact
~59k people reached

Feb
4
awarded  Popular Question
Jan
12
awarded  Cleanup
Jan
12
revised What is a good practical (and sane) way to manage all your passwords for online sites?
added 62 characters in body
Jan
12
revised What is a good practical (and sane) way to manage all your passwords for online sites?
rolled back to a previous revision
Dec
5
reviewed Reject What is a good practical (and sane) way to manage all your passwords for online sites?
Dec
5
revised What is a good practical (and sane) way to manage all your passwords for online sites?
Bad answer
Jul
25
comment How can mini-computers (like Raspberry Pi) be applied to IT security?
Here's a recent article that talks about Raspberry Pi in the security field.
Jul
16
awarded  Caucus
Jun
24
awarded  Notable Question
May
13
awarded  Notable Question
Apr
14
awarded  Good Question
Apr
12
awarded  Yearling
Feb
20
awarded  Famous Question
Dec
31
revised Does cynicism have a valid role in information security?
fixed wording
Dec
31
asked Does cynicism have a valid role in information security?
Sep
30
comment What is a good practical (and sane) way to manage all your passwords for online sites?
@bahamat I don't think I'm clever. I trust the math.
Sep
30
revised What is a good practical (and sane) way to manage all your passwords for online sites?
Added Blum's method
Sep
24
awarded  Autobiographer
Aug
25
comment Why is “www.” considered unsafe in this HTTPS URL?
Web security strongly relies on hostnames. And a hostname www.soundcloud.com is not the same as soundcloud.com -- browsers and SSL certs are very strict about this. (And there are right and wrong ways to configure servers to handle these discrepancies. Sometimes mistakes, like a faulty 301 redirect, cause errors like this.)
Aug
15
comment What are the security reasons for disallowing the plus sign in email addresses?
@JamesT.Huggett At that point it's more of an engineering/UX problem than a real security issue. There's ways to strip out or ignore the "plus" portion of a Gmail address and check for duplicates. It can be inconvenient to implement, but it gives more security/control to the user.