Loyalty discounts threaten privacy
How many of us would carry a tracking device around on our person, if paid pennies per week by a large corporation to do so? Strangely, most people do… Continue reading
Category Archives: Security engineering
PassWindow
PassWindow authentication claims “unsurpassed security”… Continue reading
Improving login timeout ergonomics
To prevent brute-force attacks, secure computer systems limit login attempts. Traditionally, only three unsuccessful attempts are permitted. This approach disincentivises the selection of strong passwords. This article presents improvements to login timeout ergonomics that increase overall system security. Continue reading
Preventing reuse of passwords
Password management is challenging because passwords are traditionally chosen by users themselves. This article presents a method of strongly discouraging the reuse of potentially compromised passwords. Continue reading
On Blackberry communications security
A commentary on the governmental pressure on RIM over Blackberry communications security. Continue reading