22,710 reputation
648106
bio website infosecstudent.com
location Singapore
age 19
visits member for 1 year, 11 months
seen 2 hours ago

Currently a student studying IT security.


3h
comment How do big companies ensure that other people don't register a new top level domain with their name?
Google employs thousands of people sitting in front of computers whose sole job is snatching up domain names when they become available.
4h
answered Is there a general name for this sort of cryptographic protocol?
21h
awarded  Good Answer
1d
comment How different should passwords be?
1. You should not generated passwords ONLINE. This doesn't mean that you shouldn't generate passwords locally on your computer.... 2. Yes, it's called keepass and dropbox.
1d
comment How different should passwords be?
@Celeritas Password managers.....
1d
answered How different should passwords be?
Apr
20
comment Length-constant password comparison in scrypt?
And which part of the accepted answer isn't clear? No, timing attacks aren't really relevant to hashing.
Apr
14
awarded  Nice Question
Apr
14
answered Advantages of one time pad
Apr
11
comment Is there any point in using 'strong' passwords?
@Pacerier security.stackexchange.com/a/31846/10211
Apr
5
comment Is Telegram secure?
@Luc I really wish I can downvote comments. Really? Non-standard crypto doesn't make you nervous? Do you want to encourage people to use crypto protocols without strong theoretical foundations? What happens when adoption reaches critical mass and a serious vulnerability is found? Yes, protocols need to be designed by people. But the people designing them should be trained cryptographers and the protocol needs to be peer reviewed by other trained cryptographers.
Apr
4
comment Is Telegram secure?
"A non-standard crypto is not necesarilly less secure." Every single respectable cryptographer in the world will disagree with you.
Apr
1
reviewed Leave Open Do PHP frameworks such as Zend, symfony and CakePHP provide default protection against cross site scripting?
Mar
26
comment WordPress Private Expoit?
This is blatantly untrue. Wordpress like any other software out there has vulnerabilities. misconfigured servers definitely isn't the only way Wordpress sites get owned.
Mar
14
answered OS/Host age as a security attribute
Mar
12
reviewed Leave Closed Yet another newbie security paranoid user authentication
Mar
12
reviewed Close What's wrong with a website including a password in a confirmation email?
Mar
12
reviewed Close Which Secure Development Lifecycle model to choose?
Mar
12
reviewed Close What Trusted Root Certification Authorities should I trust?
Mar
12
reviewed Close Is my hashing method secure?