We often hear people say that there is a trade-off between security and convenience. Although there is some truth to that, I want to explain why, more often than not, security actually requires convenience. I should warn you, though, that this is going to be one of my most boastful articles to date. Users of [...]
An otherwise excellent article over at The Inquirer has a very unfortunate title: AES encryption is cracked. AES is the Advanced Encryption Standard and is at the heart of so much encryption used today by governments, militaries, banks, and all of us. It is used by 1Password and less directly by Knox for Mac. It [...]
I’ve always wanted to write a technical followup to an earlier post, Toward Better Master Passwords, but this time going into some of the math behind it. Today’s xkcd comic does that for me: Indeed, what took me nearly 2000 words to say in non-technical terms, Randall Monroe was able to sum up in a [...]
About 12 years ago I was fighting a losing campaign against JavaScript’s ubiquity. There was a time when JavaScript was a security nightmare, and I ranted and raved against it. Things have changed enormously since then, all for the better. A few of the slogans that I and my colleagues shouted from the rooftops in [...]
When in the course of network events rumors start flying about Dropbox a decent respect for the concerns of 1Password users compels me to blog about it. 1Password users certainly enjoy the convenience of syncing their data across Mac, Windows, iPhone, iPad, iPod Touch, Android and Windows 7 Phone. This is managed using Dropbox, and [...]
1Password is great for generating strong random passwords for sites without you ever having to memorize (or even see) those passwords. But there are a few passwords that we all do need to remember. I have a small number (I wish I could say just one) high security passwords that I need to remember. One, [...]
Plus ça change, plus c’est même chose — Jean-Baptiste Alphonse Karr Summary: Dropbox remains safe for 1Password use despite some high profile discussion of its security. Keeping up with news about security issues can make your head spin. It certainly does that to me. Most often important news gets little public attention, and at other [...]