UX failure of the day: Eastern Bank’s new personal banking portal
Whatever Eastern Bank’s priorities were in rolling out its new portal, good UX and security seemingly weren’t among them.
Category Archives: Computer Security
MyFitnessPal is not telling the whole truth about recent data “corruption” incident
I’m fairly certain I did not eat “Enjoy Cock Cayenne Pepper Hot Sauce” last week. So why does the MyFitnessPal app say I did?
Why is PayPal still so incredibly awful?
Even if you jump through all of PayPal’s hoops and give them all the information they ask for when creating an account, they may still decide to arbitrarily lock you out of your account and never restore your access.
You should be backing up your password manager
It’s a bad idea to entirely rely on the company hosting your password manager to back up your data.
How a bad password policy at Bank of America reduces security
When you force people to use hard-to-remember passwords, you’re actually forcing them to use bad passwords.
LastPass still hasn’t learned the first rule of being in a hole
LastPass sent out an email and published a blog posting today to go with the support article they published earlier this week. They keep making things worse.
Newly released details about the recent LastPass security incident are bad
The newly released details about last fall’s LastPass breach and their response to it are bad, and LastPass should feel bad, and you should stop using LastPass.
Why you should not use RegScale
Companies that engage in slimy marketing practices tend to be slimy companies. RegScale fits that description, so you should avoid doing business with them.
How to protect your anonymity online when the services you use could be breached
Twitter is in the news again with another security breach in which 235 million users’ email addresses, phone numbers, and Twitter handles were exposed. These seems like a good opportunity to talk about what you can / should do to protect yourself if you need to maintain anonymity online. The basic rule is this: if… Read More »
Scripts for using Shamir’s Secret Sharing Scheme securely
The open-source package Shamir’s Secret Sharing Scheme, or “ssss” for short, allows a relatively short secret, for example, a password or passphrase, to be split into a specified number of shares in a way that allows the entire secret to be reconstructed from only a subset of the shares. For example, you can split a… Read More »