by
Jeffrey Goldberg
The details are still vague, but it appears that the encrypted passwords of 35 million Steam users have been captured by bad guys. Note that there were two breaches. One was of Steam forums, the other is of their main user database. I am just discussing the later here as it involves many more users.
Continue reading
by
Jeffrey Goldberg
Editor’s note: This blog post was written in 2011. You can now protect your 1Password account with two-factor authentication, using an app like Authy or a security key. Teams can also use Duo’s authentication app as an extra layer of protection for employee accounts.
Continue reading
by
Jeffrey Goldberg
It has recently been noted over at ZDNET that if your Facebook password is PattyAndMolly, Facebook will also accept pATTYaNDmOLLY as a valid password. This may initially seems look something that weakens users’ security. However it actually is a good thing.
Continue reading
by
Jeffrey Goldberg
The big security news of the past few days is the story of the compromise of the DigiNotar Certificate Authority and the subsequent issuing of fraudulent SSL certificates, leading to actual Man in the Middle attacks against Gmail users in Iran. If that previous sentence was gobbledygook, this post should explain some of it. It will also give you …
Continue reading
by
Jeffrey Goldberg
Twelve passwords for banks and bills so high, Seventy for retailers with their online stores, Ninety for communities of Men to whom I say “hi”, One for me, ’cause I can’t know more. In the land of Crypto where the Secrets lie.
Continue reading
by
Jeffrey Goldberg
We often hear people say that there is a trade-off between security and convenience. Although there is some truth to that, I want to explain why, more often than not, security actually requires convenience. I should warn you, though, that this is going to be one of my most boastful articles to date.
Continue reading