Reputation
317
Top tag
Next privilege 500 Rep.
Access review queues
Badges
2 10
Newest
 Constituent
Impact
~1k people reached

  • 0 posts edited
  • 17 helpful flags
  • 114 votes cast
Dec
7
revised Do you actively think about security when coding?
added 74 characters in body
Dec
6
answered How to make security usable in a web application?
Dec
4
comment When should an IT consultant use full disc encryption?
I agree with Piskvor on this - brute forcing full disk encryption is likely to be impractical in a usable timeframe. If something is that valuable they will go for physical intimidation/torture etc - which is why if it is that valuable you also provide physical security in addition to the disk encryption. It is a serious deterrent.
Dec
4
comment When should an IT consultant use full disc encryption?
Unfortunately encrypted volumes are considerably easier to break than full disk encryption, which usually requires something like the Evil Maid attack (schneier.com/blog/archives/2009/10/evil_maid_attac.html) as there is far too often data pertinent to the volume key in memory or temporary space! Check your implementation well if the data on your laptop is highly sensitive!
Dec
4
answered What security practices should you be aware of when writing software?
Dec
4
answered Why do websites restrict the number & choice of characters in a password?
Dec
4
answered Do you actively think about security when coding?
Dec
3
comment What would you add in this Software Development Project Checklist?
David - maybe you are right that this level of detail should not be there, but I think there should at least be a line item for security. Better?
Dec
3
awarded  Teacher
Dec
3
answered What would you add in this Software Development Project Checklist?
Dec
3
answered Citations for inadvisability of globally unique password
Dec
3
awarded  Autobiographer