sporksmith

7 ms·

31.
by sporksmith 14y ago
> The point is that the mandatory substring is random and unique to you. Ah, that's a little better. I still think the security gained is not enough to justify how much of a usability problem this could be, though. Assuming the per-user
32.
by sporksmith 14y ago
I agree this is a major issue, and in fact was specifically covered in an earlier xkcd ( http://xkcd.com/792/ ) than the one cited ( http://xkcd.com/936/ ). It might be a good idea to enforce non-password reuse, but the proposed solutions s
33.
by sporksmith 14y ago
Isn't this typically the case anyways? A hacker with access to your email account can just use the password reset mechanism to get a sign-in link to your other web sites.
34.
EepEepMotion: Opportunistic stop-motion with a stuffed monkey(sporksmith.wordpress.com)
2 points by sporksmith 14y ago|0 comments
35.
by sporksmith 14y ago
Fun :). I did something similar with a bunch of photos of a stuffed monkey. I made a music video instead of an interactive web app, though the latter would probably not be too difficult since I wrote the software using Processing. http://s
36.
by sporksmith 14y ago
You may want to take a look at tboot: http://tboot.sourceforge.net/ tboot is a version of grub modified to perform a TPM-measured launch of the OS. It's not sufficient by itself to do what you want, but you could build on that by, say, se
37.
by sporksmith 15y ago
I thought this was interesting as well. The second bullet is a bit misleading though. The benefit is not just in case there is a design weakness in bcrypt. The real benefit is briefly summarized in the first bullet: It's effectively forcing
38.
by sporksmith 16y ago
One response I'm surprised didn't get more votes at stackoverflow is thinking on paper. Not only does it make the fact that you're thinking visible and socially acceptable; it's a big help in focusing your thoughts. I use this all of the ti