New answers tagged memory
This is perfectly feasible. Current RAM only holds its storage while power is applied to it, so doing that in a mobile device is no different to doing it in a computer. And you are right - turning the power off will lose all data on the drive in a very short time frame. Your question 2 is irrelevant. All common RAM implementations can do this. All you are ...
By fiddling with the internal contents of String instances, you incur the risk of severely breaking your application. The first reason is that String instances are supposed to be immutable, which means that instances may be reused; when you modify "your" string you may actually modify other strings that are conceptually distinct but happen to have the same ...
If you have an email destination that spawns another email destination, there's a chance that will turn into a feedback loop. At it's most efficient, the smtp might deliver your mail to your local destination before it receives a resend, i.e. you lose disk space. If it doesn't, you lose cpu cycles, and diskspace.
If a user can get your email server to spam emails, it could increase the likelihood that all emails from you are automatically marked as spam. In the worst case, you could end up on email blacklists and emails you send could be completely ignored. This is assuming you are running all parts of this on your own servers. If not, you might want to clarify.
I think the greatest threat could be Denial of service, you could send so many e-mails you could saturate your SMTP server, your mail server and your user´s personal inbox.
Each block of the output of PBKDF2 is derived independently of all the other blocks. Because of this, computing a large output on a massively parallel system (such as a GPU) is very efficient. Further, if you only take certain bytes of the output and discard the rest, an attacker only needs to compute the blocks containing those bytes.
We can't "also make PBKDF2 use a lot of memory by simply asking it for a large output (and taking the bytes we actually need from the end of output, discarding the rest)" because PBKDF2 can essentially stream its output.
Top 50 recent answers are included