security convention

Round Peg, Square Hole

CCS Paper Part #2: Password Entropy

| | analysis, ccs, password cracking, security convention
This is part #2 in a (mumble, cough, mumble) part serious of posts discussing the results published in the paper I co-authored on the effectiveness of passwords security metrics. Part #1 can ...
Reusable Security
New Paper on Password Security Metrics

New Paper on Password Security Metrics

| | analysis, Crypto, password cracking, security convention
I'm in Chicago at the ACM CCS conference, and the paper I presented there: "Testing Metrics for Password Creation Policies by Attacking Large Sets of Revealed Passwords", is now available online.Direct Download ...
Reusable Security

Defcon Crack Me if You Can Competition

| | defcon, pasword cracking, security convention
I'd be remiss if I didn't spend a little time talking about the "Crack Me if you Can" competition at Defcon. It's really been amazing the amount of interest that this contest ...
Reusable Security