Solving password problems one at a time, Re: The password-reset paradox
https://www.metzdowd.com/pipermail/cryptography/2009-February/015181.html


Dave Kleiman dave at davekleiman.com
Mon Feb 23 13:41:45 EST 2009

>> On February 21, 2009 14:34, Ed Gerck wrote:
>> In a business, one must write down the passwords and one must have a
>> duplicate copy of it, with further backup, where management can access
>> it. This is SOP.
>>
>> This is done not just in case the proverbial truck hits the employee, or
>> fire strikes the building, or for the disgruntled cases, but because
>> people do forget and a company cannot be at the same time responsible to
>> the shareholders for its daily operations and not be responsible for the
>> passwords that pretty much define how those daily operations are run.

The idea that people should not write their passwords is thus silly from
the security viewpoint of assuring availability and also for another
reason. Users cannot be trusted to follow instructions. So, if one's
security depends on their users following instructions, then something
is wrong from the start.

Most organizations I interact with have an SOP that nobody should ever know another's password. The only passwords that are safe stored are those for encryption or the top level admin. You take on a degree of legal responsibility if you have the ability to logon as another user. Since the admin can easily change a user's password, what would be the necessity for this risk? All password changes should be audited.


Respectfully,

Dave Kleiman - http://www.ComputerForensicExaminer.com
4371 Northlake Blvd #314
Palm Beach Gardens, FL 33410
561.310.8801

RE: Defamation and the diffculties of law on the Internet.
From: "dave kleiman" <dave () davekleiman com>
Date: Wed, 12 Mar 2008 03:25:13 -0400
https://seclists.org/basics/2008/Mar/147


Hats off to you Craig,


Sometimes you amaze me....I literally today just took on a case today
dealing exactly with this, you are making my life easy as I am gathering
(with your permission) this information you have provided for my client's
review.
When this becomes public record, I will post-up the results.

I will take any more information on this subject with great enthusiasm and
appreciation, as always!!!

By the way, for those of you who have never asked for Craig's help, you do
not know what you are missing.
I have asked his research assistance more than once. One particular time it
was dealing with abilities of cookies on the server side, when I awoke the
next morning, I had 100's of pages and links of information on that subject,
and variations and ideas I had not even or forgotten to consider (e.g. web
bugs). Why did he help, for no other than reason than he just likes to
research information, and possibly considers me a friend from afar. He
probably had as much fun reading up on the subject as did.
And along with all the technical details he included this:

Cookie Recipe Ingredients:
125 grams butter
50 grams caster sugar
60 grams brown sugar
1 large egg
1 teaspoon vanilla essence/extract
125 grams of plain flour
1/2 teaspoon salt
1/2 teaspoon bicarbonate of soda
250 grams of chocolate (Dark is best for this)
1/2 cup coarsely chopped almonds

Method: Turn your oven on to preheat at 180 degrees Celsius (about 350
degrees Fahrenheit, gas mark 4). Remember to take your grill pan out first.
Now get some baking trays ready (if they're not non-stick then you better
line them or grease them)......................Hey Presto! The world's BEST
cookies, in the comfort of your own home.

In the midst of this data exchange I casually mentioned that one day, when I
was in the position to not have to work so much, I would return to school
and my dream degrees in Cosmology and Astrophysics. Of course, the next day
I had links to every online study available for those degrees, with a "why
wait wink."


Further, it amazes me how Craig has a Blog helping to understand the rights
of US based Digital Forensic Examiners:
http://gse-compliance.blogspot.com/2008/01/texas-pi-fud.html
And he is based in AU. He simply cares enough about the cause and the
industry to help, it has no direct affect on him if US DFEs are required to
have PI licenses!!


People of the past considered "Loons":
(Feynman, Hawking, Sagan, da Vinci, Einstein, Columbus, everyone associated
with Monty Python and the Holy Grail:
Black Knight: Right, I'll do you for that!
King Arthur: You'll what?
Black Knight: Come here!
King Arthur: What are you gonna do, bleed on me?
Black Knight: I'm invincible!
King Arthur: ...You're a loony.
.......you get the picture)


Yep Craig is a Junkie; a Knowledge Junkie!!!!

For those of you who have nothing good to say; why say anything?

Dave


Respectfully,

Dave Kleiman - http://www.davekleiman.com
4371 Northlake Blvd #314
Palm Beach Gardens, FL 33410
561.310.8801

2003-08-11
Dave Kleiman posts on The Cryptography Mailing List
Director of IT Security, North Wales, PA
https://marc.info/?l=security-jobs&m=106061946710645&w=2

2003-07-24
All Dave Kleiman posts on The Cryptography Mailing List
Authors
https://marc.info/?w=2&r=1&s=Dave+Kleiman&q=a

From: "dave kleiman" <dave () netmedic ! net>
Date: 2003-09-23 23:49:10
[Download RAW message or body]

Hey all,

I would like to announce the release off our free tool,
Securit-e-PortControl.
This is a lightened version of one tool that comes as part of our
Securit-e-Lok tool suite.

The tool is available for download at
http://www.securit-e-doc.com/products/securitelok.asp
Click on free downloads. There is no form to fill out, and we will not
collect your e-mail addy's or attempt to send marketing material to you.

Please feel free to give me your thoughts and comments on it.

Please send all your comments to me at this e-mail address not my
Securit-e-Doc address.


Thanks


Chief Information Security Officer
Securit-e-Doc, Inc.
515 N. Flagler Dr. Suite 203
WPB, FL 33401
561.833.2303 x121 Fax: 561.833.0132

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=sectools&m=106442592530989&w=2

Subject: The FBI's InfraGard 2005 National Conference
From: "dave kleiman" <dave () isecureu ! com>
Date: 2005-07-13 11:17:20

The conference will be held on August 9, 10 & 11 in Washington DC at the JW
Marriott at 1331 Pennsylvania Ave, Washington DC.

http://www.infragardconferences.com

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=webappsec&m=112126185712230&w=2

Subject: RE: Peter Gutmann data deletion theaory?
From: "dave kleiman" <dave () isecureu ! com>
Date: 2005-07-24 19:30:30

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=bugtraq&m=112251165318070&w=2

Subject: RE: The ugly side of using disk encryption
From: "dave kleiman" <dave () davekleiman ! com>
Date: 2006-10-23 16:29:53

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=security-basics&m=116165137207757&w=2

Subject: CyberCrime Summit
From: "dave kleiman" <dave () davekleiman ! com>
Date: 2007-03-17 15:13:28
Message-ID: 01b701c768a6$d2c8e6f0$7ad4a8c0 () a1
[Download RAW message or body]

Mar. 19 - 23, 2007
CyberCrime Institute
3333 George Busbee Drive
Kennesaw, GA 30144

http://www.cybercrimesummit.com/schedule/SCHEDULE.HTM


Respectfully,

Dave Kleiman

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=forensics&m=117433686823711&w=2

Subject: CyberCrime Summit 2009 - Back and better than ever!!
From: "Dave Kleiman" <dave () davekleiman ! com>
Date: 2008-11-12 17:36:24
Message-ID: 029601c944ed$31275910$93760b30$ () com
[Download RAW message or body]

When: March 16 - 20, 2009
Where: Kennesaw State University
3333 Busbee Drive
Kennesaw, GA 30144

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=security-basics&m=122651552516836&w=2

Subject: Federally Mandated Certification of cybersecurity professionals?
From: "Dave Kleiman" <dave () davekleiman ! com>
Date: 2009-04-02 2:17:34
Message-ID: 02e101c9b339$310838e0$9318aaa0$ () com
[Download RAW message or body]

The Rockefeller-Snowe measure would create the Office of the National Cybersecurity \
Adviser, whose leader would report directly to the president and would coordinate \
defense efforts across government agencies. It would require the National Institute \
of Standards and Technology to establish "measurable and auditable cybersecurity \
standards" that would apply to private companies as well as the government. It also \
would require licensing and certification of cybersecurity professionals.

http://www.washingtonpost.com/wp-dyn/content/article/2009/03/31/AR2009033103684_pf.html




Respectfully,

Dave Kleiman

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=security-basics&m=122651552516836&w=2

Subject: RE: Bank Of Montreal Online Security
From: Dave Kleiman <dave () davekleiman ! com>
Date: 2012-10-31 14:26:30
Message-ID: 41A9E8A6808A4D498A4757A540FFF51F073EEDFAEB () MBX02 ! exg5 ! exghost ! com
[Download RAW message or body]

Alexander,

>>> Which password length is more secure - that is a question.<<<

Dave Kleiman posts on The Cryptography Mailing List
https://marc.info/?l=security-basics&m=135169718420812&w=2

Interesting Facts About David Kleiman's Life

Born in 1965 and adopted by Jewish parents: Louis and Regina Kleiman
Grew up in Palm Beach Gardens, Florida
Served as an Army helicopter technician from 1986 to 1989 (age 21-24)
Named soldier of the year in 1987 by the secretary of the Army (age 22)
Served as a Palm Beach County Sheriff’s deputy and detective until rendered paraplegic by a 1995 off-duty motorcycle crash (age 30)
After rehab from the crash, using a wheelchair, worked in computer forensics.
Married and divorced twice but had no children
In his final years, complications from his injuries required that he have five or six additional surgeries and spend nearly three years in the hospital battling an MRSA bacterial infection
Came home physically weak, but refused living assistance
Died weeks later on April 26, 2013 (age 46) of a heart attack caused by the MRSA infection

Thoughts:

Based on the times given, he must have entered the hospital for his final stay around April, 2010. This would have been several months before the opening of the (Pre-Karpeles) Mt. Gox and any free-floating exchange-based price. Satoshi's last correspondence occured April 23, 2011, so if any of Satoshi's last year of correspondence came from Kleiman, it came from Kleiman posting from the hospital. He died two weeks after the peak of the first 2013 price bubble ($266/BTC).

References:

http://mpb.floridaweekly.com/news/2013-05-16/Community/Father_friends_mourn_a_sons_life_cut_short.html

http://www.mypalmbeachpost.com/news/news/local/obituary-former-pbso-deputy-dies-in-his-home/nXcqR

http://gizmodo.com/this-australian-says-he-and-his-dead-friend-invented-bi-1746958692

http://www.wired.com/2015/12/bitcoins-creator-satoshi-nakamoto-is-probably-this-unknown-australian-genius

source : https://www.reddit.com/r/Bitcoin/comments/3w3ije/interesting_facts_about_david_kleimans_life/

Circa 2012: https://www.youtube.com/watch?v=dn6q0dGrHRY

Everything makes sense if David Kleiman was Satoshi Nakamoto. Here’s why
John Hardy
Posted on3 May 2016
https://seebitcoin.com/2016/05/everything-makes-sense-if-david-kleiman-was-satoshi-nakamoto-heres-why/

A story of apples
- Craig Wright (Bitcoin SV is Bitcoin.)
- Medium
2020 01 03

"It is said that the apple doesn’t fall far from the tree. Well, Ira Kleiman and David Kleiman are not related genetically."

https://medium.com/@craig_10243/a-story-of-apples-b02c5d98a8d4

Louis Kleiman
https://www.facebook.com/louis.kleiman.5

Is Dave Kleiman the Missing Link in Craig Wright's Satoshi Story?
Andy Cush
5/04/16 12:36PM
https://gizmodo.com/is-dave-kleiman-the-missing-link-in-craig-wrights-satos-1774519534