316 reputation
210
bio website infosecfrog.blogspot.com
location Scotland, United Kingdom
age 43
visits member for 4 years
seen Oct 28 at 10:59

Have mostly coded in legacy languages:

  • 6800 Assembler and hex
  • 68000 Assembler
  • Z80 Assembler
  • COMAL
  • PASCAL
  • Fortran
  • C
  • COBOL

but am vaguely learning C++, Java, Ruby on rails, .NET and other languages and frameworks I come across


Dec
9
answered What should be in a coding standard?
Dec
7
awarded  Supporter
Dec
7
awarded  Editor
Dec
7
revised Do you actively think about security when coding?
added 74 characters in body
Dec
6
answered How to make security usable in a web application?
Dec
4
comment When should an IT consultant use full disc encryption?
I agree with Piskvor on this - brute forcing full disk encryption is likely to be impractical in a usable timeframe. If something is that valuable they will go for physical intimidation/torture etc - which is why if it is that valuable you also provide physical security in addition to the disk encryption. It is a serious deterrent.
Dec
4
comment When should an IT consultant use full disc encryption?
Unfortunately encrypted volumes are considerably easier to break than full disk encryption, which usually requires something like the Evil Maid attack (schneier.com/blog/archives/2009/10/evil_maid_attac.html) as there is far too often data pertinent to the volume key in memory or temporary space! Check your implementation well if the data on your laptop is highly sensitive!
Dec
4
answered What security practices should you be aware of when writing software?
Dec
4
answered Why do websites restrict the number & choice of characters in a password?
Dec
4
answered Do you actively think about security when coding?
Dec
3
comment What would you add in this Software Development Project Checklist?
David - maybe you are right that this level of detail should not be there, but I think there should at least be a line item for security. Better?
Dec
3
awarded  Teacher
Dec
3
answered What would you add in this Software Development Project Checklist?
Dec
3
answered Citations for inadvisability of globally unique password
Dec
3
awarded  Autobiographer