IEEE should be embarrassed

Albert Zenkoff
2012-09-27
Management, IEEE, incident, news, passwords, plaintext, security practices, user information

“The world’s largest professional association for the advancement of technology” has been thoroughly embarrassed in an accident where they left their log files containing user names and passwords open for FTP access to all on the Net for more than a month, according to a DarkReading report. Or, at least, I think they should be ...

Random or not? That is the question!

Albert Zenkoff
2012-09-13
Technology, layered security, PRNG, Pseudorandom Numbers, random, random number generator, RNG, security, separation by function, technology

Oftentimes, the first cryptography related question you come across while designing a system is the question of random numbers. We need some random numbers in many places when developing web applications: identifiers, tokens, passwords etc. all need to be somewhat unpredictable. The question is, how unpredictable should they be? In other words, what should be ...

IEEE should be embarrassed