This moring I received one message from “Gmail team” with the subject of “Make Your Own Website With Google For Free”. It’s really a Phishing message to steal your Gmail account and password! Read more…
Long time ago, I would like to write something on web security, as lots of business being transferred to web infrastructure. The threat has become more severe in a short period of time. Web insecurity becomes a big problem today. We have no choice but to confront the issues. Read more…
读到一则关于安全专家Bruce的采访，内容非常生动有趣，和大家分享一下其中精彩之处。
>复杂是安全最大的敌人，系统越是负责，就会变得越不安全。
Complexity is the worst enemy of security; as systems become more complex, they get less secure.
>另外，关于口令，Bruce也谈了自己独特的见解。复杂是最大的敌人同样适用。要使自己方便记住，将不是很重要的口令设置成一个。将一些其他的口令记在一些小纸条上，放在钱包里；使用口令管理程序Password Safe…
One, I choose the same password for all low-security applications. There are several Web sites where I pay for access, and I have the same password for all of them. Two, I write my passwords down. There’s this rampant myth that you shouldn’t write your passwords down. My advice is exactly the opposite. We already know how to secure small bits of paper. Write your passwords down on a small bit of paper, and put it with all of your other valuable small bits of paper: in your wallet. And three, I store my passwords in a program I designed called Password Safe.
下面是采访的原文… Read more…
Recent Comments