Tag Archives: Security

For those who have forgotten, 2 years ago Equifax—one of the top three credit reporting services in the world—suffered a catastrophic breach that resulted in the loss of data on 150 million people. The details are drearily familiar: Equifax had … Continue reading →

Via Karl Voit we have this Tweet from Tim Dierks offering some pithy but good advice to engineers about crypto: I’ve been working on Google’s cryptography policy (for engineers). It fits in a tweet: Don’t invent your own algorithms, don’t … Continue reading →

Over at the Independent Security Evaluators site they have an interesting article on the security of of several password managers. It’s virtually universal advice from security experts that you should use a password manager and the authors of the article … Continue reading →

Last week, I wrote in Nothing to Hide that although the “I Have Nothing to Hide” folks believe they are too unimportant to be targeted by governments and hackers, that is almost certainly wrong. Serendipitously, the current issue the SANS … Continue reading →

This is almost too easy. Remember how governments everywhere are whining about not being able to read our encrypted communications and are demanding a backdoor? “Don’t worry,” they tell us, “we’re the government and we’re experts in this stuff. We … Continue reading →

I was trying to create a Web account with my credit card company so I could update some information. The process was painful beyond endurance and their password policy revealed that they weren’t using the best practices method of hashing … Continue reading →

Karl Voit has an useful post on good password security practices. There’s not really anything new in the post but it brings together most of the best practices in a single place. The main problem is that you no longer … Continue reading →