Tag Archives: cookies

Improving web authentication

You use passwords, possibly dozens of passwords, to authenticate to websites daily. Passwords are a useful authentication tool because they function as a “thing-you-know” (a shared secret between you and the server) and because passwords can be changed (in case of loss, unlike say, your fingerprints).

In a diatribe against OpenID titled, “Goodbye, Passwords. [...]

Boycott Performance Bike

Boycott Performance Bike.

Performance is a company that sells bike components. They’re pretty big and have acquired their former competitors like Nashbar and SuperGo. That’s too bad because I really don’t like Performance. Maybe you shouldn’t either.

In 2001, Kevin Fu and I (along with some other members of the Applied Security Reading Group) were looking into the security [...]