by
Jeffrey Goldberg
An otherwise excellent article over at The Inquirer has a very unfortunate title: AES encryption is cracked. AES is the Advanced Encryption Standard and is at the heart of so much encryption used today by governments, militaries, banks, and all of us. It is used by 1Password and less directly by Knox for Mac. It is the work horse of modern …
Continue reading
by
Jeffrey Goldberg
I’ve always wanted to write a technical followup to an earlier post, Toward Better Master Passwords, but this time going into some of the math behind it. Today’s xkcd comic does that for me:
Continue reading
by
Jeffrey Goldberg
About 12 years ago I was fighting a losing campaign against JavaScript’s ubiquity. There was a time when JavaScript was a security nightmare, and I ranted and raved against it. Things have changed enormously since then, all for the better. A few of the slogans that I and my colleagues shouted from the rooftops in the previous millennium seem to …
Continue reading
by
Jeffrey Goldberg
When in the course of network events rumors start flying about Dropbox a decent respect for the concerns of 1Password users compels me to blog about it.
Continue reading
by
Jeffrey Goldberg
I may never get tired of talking about password reuse (using the same password on different sites), but you may get tired of hearing me go on about this. So I will keep this post short.
Continue reading
by
Jeffrey Goldberg
Dropbox and 1Password are just awesome together. So when questions arise about Dropbox security we pay very close attention to what it means for our users. We owe it to ourselves and to our users to examine these and adapt and modify our recommendations accordingly.
Continue reading