Tag Archives: Security

An Implementation of Diceware

A few of my recent posts (1, 2, 3) discussed the Diceware method of choosing a password. The idea is that you roll a die 5 times to get a 5 digit number and use that number to look up … Continue reading

Posted in Programming | Tagged | Leave a comment

Troy Hunt On XKCD Password Security

Troy Hunt, whose work I admire and have mentioned before (1, 2, 3) has posted about the XKCD password security cartoon that I wrote about in Password Advice From XKCD. It’s easy to misconstrue his post as being critical of … Continue reading

Posted in General | Tagged | Leave a comment

How People Select Their Passwords

The invaluable Troy Hunt has run another analysis of recent dumps of password data from Anonymous, LulzSec, and others. This time he looks at how people select their passwords. As with his previous analyses, the results are depressing. His idea … Continue reading

Posted in General | Tagged | Leave a comment

Password Advice From XKCD

In view of today’s XKCD: I thought it would be useful to again mention the post by Jeff over at the Agile Bits Blog. That post discusses making a password by choosing 5 or 6 random words for your passwords. … Continue reading

Posted in General | Tagged | 1 Comment

Common iPhone Pins

I’ve written several (1, 2, 3) posts about the analysis of passwords divulged by groups like LulzSec. The results were terrifyingly consistent: 123456 and password were almost always the most frequently used passwords. Now Daniel Amitay author of the Big … Continue reading

Posted in General | Tagged | Leave a comment

The 25 Most Dangerous Software Errors

Each year the SANS Institute and the MITRE Corporation team up to survey the year’s most dangerous programming errors. This year’s list, the 2011 Common Weakness Enumeration, was published at the end of June. This is a great resource and … Continue reading

Posted in Programming | Tagged | Leave a comment

A Lawsuit Waiting To Happen

There’s an interesting, if depressing, post over at hover.com about how feedback had fueled new features. One of these new features seems particularly ill-advised. Apparently some of their users weren’t able to remember their passwords so Hover Would send them … Continue reading

Posted in General | Tagged | Leave a comment

Better Passwords

Over at the AgileBits Blog (the makers of 1Password) Jeff has a nice discussion of picking secure passwords. His discussion is in the context of picking a master password for 1Password but it applies more generally. Much of the really … Continue reading

Posted in General | Tagged | Leave a comment

The Security Hall of Shame

Two more inductees into the Security Hall of Shame. Honestly, I could devote a whole blog to this sort of thing. Perhaps we should start a Security Hall of Shame blog similar to Steve Friedl’s No Dashes or Spaces Hall … Continue reading

Posted in General | Tagged | Leave a comment

Lessons From Dropbox

I’ve written before about Dropbox and their supposed scandal regarding the perfectly obvious fact that they could, in fact, read users’ files stored on the site. Despite the lamentations of the aggrieved and even the filing of a complaint with … Continue reading

Posted in General | Tagged | Leave a comment