Reputation
30,765
Next tag badge:
96/100 score
19/20 answers
Badges
10 79 152
Newest
 Guru
Impact
~2.0m people reached

Dec
18
revised Benefit to using PBKDF2 on key generated by RNGCryptoServiceProvider?
deleted 11 characters in body
Dec
18
answered Benefit to using PBKDF2 on key generated by RNGCryptoServiceProvider?
Dec
18
answered Why does Google cripple the 2FA Google Authenticator PAM module?
Dec
18
reviewed Close Hacking through a browser?
Dec
18
reviewed Reject How to detect changes to client
Dec
18
reviewed Reject Is it safe to show users why their password is not allowed?
Dec
18
answered How to detect changes to client
Dec
17
reviewed Close Password management
Dec
17
comment Challenges in authentications
@user2315 Thomas Pornin says otherwise. security.stackexchange.com/a/3213/10211
Dec
17
answered Challenges in authentications
Dec
17
comment Does Google/Dropbox/Github Two-Step Verification count as Two-Factor?
"Devices and tokens that implement TOTP (Yubikey, Google Authenticator app) are designed to protect the secret key against extraction." - Not true. The Google Authenticator app merely stores the key in an sqlite database.
Dec
16
comment Getting rid of trojans on Windows XP - the basic toolkit
download.fedoraproject.org/pub/fedora/linux/releases/19/Live/…
Dec
16
reviewed No Action Needed WiFi Direct/WPS key question
Dec
16
revised How secure is XMPP with self-signed SSL certificates?
deleted 11 characters in body
Dec
16
revised How stack smashing is prevented?
deleted 18 characters in body
Dec
16
revised How does google docs know password for published googledocs document on a public site?
deleted 11 characters in body
Dec
16
revised Can a physican website be on a non-HIPAA server?
deleted 38 characters in body
Dec
16
revised loop-aes or dm-crypt for linux hard encryption?
deleted 8 characters in body
Dec
16
revised How do you limit javascript api to a domain?
deleted 32 characters in body
Dec
16
reviewed Reject Is it bad practice to use your real name online?