22,601 reputation
647106
bio website infosecstudent.com
location Singapore
age 19
visits member for 1 year, 11 months
seen 41 mins ago

Currently a student studying IT security.


Oct
17
comment Is it possible to use a GPG or SSH key for web based authentication in a secure fashion?
Great answer as always. I guess this isn't really feasible since the manual operations needed will piss off even the most dedicated of users.
Oct
17
comment Is it possible to use a GPG or SSH key for web based authentication in a secure fashion?
+1 Some points for me to think about.
Oct
17
answered Packet filtering firewall - (Network Layer)
Oct
17
asked Is it possible to use a GPG or SSH key for web based authentication in a secure fashion?
Oct
17
reviewed Reject suggested edit on S/Key as an alternative to UNIX passwords
Oct
17
reviewed Approve suggested edit on Does returning `Access-Control-Allow-Origin: *` weaken the security of JSON GET responses?
Oct
17
reviewed Reject suggested edit on Should I use FileZilla?
Oct
17
reviewed No Action Needed What order is best for nesting VPNs?
Oct
17
reviewed No Action Needed Should I use FileZilla?
Oct
16
comment Is this password hashing + salt method the most secure way possible?
@Chrisgozd It looks ok, but you don't actually have to generate the salt separately unless you want to store it elsewhere. The HashPassword() function will automatically generate the salt for you.
Oct
16
reviewed No Action Needed Expose web service in a secure manner
Oct
16
reviewed Looks Good sqlmap unable to find SQL injection vulnerablitity
Oct
16
reviewed Approve suggested edit on How to secure my network, laptop, ipad and email accounts which are possibly hacked?
Oct
15
reviewed No Action Needed Do we need to logout of webapps?
Oct
15
revised Random Oracle existence and real world
added 77 characters in body
Oct
15
answered Random Oracle existence and real world
Oct
15
reviewed Close Android, how do I prevent Confused Deputy Attacks?
Oct
15
comment Is this password hashing + salt method the most secure way possible?
@Chrisgozd What exactly is BcryptDude? I hope you are just wrapping the Bcrypt.NET library in your own namespace and not rolling your own version of the algorithm...
Oct
15
reviewed Reject suggested edit on With BREACH attack, is session-based CSRF token still secure?
Oct
14
comment Linux: Blocking outside attempts at attacking computer
@Friendly RHEL-based systems has system-config-firewall. Not sure what the Debian-based one is called but a quick Google search will reveal the answer.