I've been reading through bettercrypto.org's Applied Crypto Hardening and really enjoying it. They take a refreshingly practical approach to cryptography books. I've done a couple of cryptography courses, and read Understanding Cryptography cover to cover, which had great video lectures and problem sets to solve. Actually I started …

How to reason about password strength

This is an issue I see come up a lot, it's discussed on Security Stack Exchange all the time. It came up on the Sage-AU mailing lists recently. But every time I see this discussion come up there are misunderstandings, mistakes or people talking …