Sprites mods has an interesting article about hacking the protection of a hardware authentication device: http://www.spritesmods.com/?art=secustick What’s interesting about this is that it shows how easy it is to feel like a hardware device is providing...
I recently experienced a small technology miracle: I found myself a stapler that doesn’t mangle staples and doesn’t jam. For years those twisted and contorted staples stuck in my carpet were a perpetual reminder of how technology has failed us. Yet despite...
Explains an old trick on how to guess someone else's password without anything getting logged in the domain controller's event logs Read More...
Many people tell me they are surprised with how much effort I put into hardening Windows Server 2003–the last hardening document I wrote for a client was 112 pages long. That’s not 112 pages of writing, policy, and how-to’s, that’s...
I finally finished my Perfect Passwords book. In this book I attack much of the conventional wisdom about password policies and present new techniques for building strong passwords. For example, I think that passwords as a technology aren’t obsolete...