If you haven't noticed yet, passwords are dead - part II

This post is a continuation of previous post, please find the part I here Ok, so my password may have leaked - what's a big deal? What if it was a meaningless password to the minor site, bound with account that does not contain any financial information. No harm done, right? Not really ... If you were using the same password on any other service / site - you may be in trouble: some evil mind / script may be already crawling via web just to find out whether you do or don't ... And this site may contain completely different sort of information…

Read More

If you haven't noticed yet, passwords are dead - part I

No more slacking and delaying the unevitable, this weekend I've migrated fully to cloud password manager. It doesn't mean I didn't use it before - for over a year I was using KeePass with DropBox synchronization, but even if I like & admire the idea of Open Source, free app like that, I find it missing too many features & to be honest - the UI has a huge room for improvement. But before we dive into apps & services ... Let's talk about passwords Few years ago I was fully convinced that having a strong, multi-word password with some digits,…

Read More

Microsoft vs Security - surprise?

Every now and then, someone wonders why I bother myself with Microsoft technologies in enterprise environment - "everyone knows that Microsoft software is buggy, prone to malware, viruses and exploits". Obviously, reasons of such thinking come from the times of MS DOS and first versions of Windows, but some think that nothing has changed in that matter. And they are very wrong - thankfully it’s very easy to prove that: Kaspersky Labs have published latest version of their IT Threat Evolution report (for Q3 2012) - http://www.securelist.com/en/analysis/204792250/IT_Threat_Evolution_Q3_2012 The…

Read More