24,065 reputation
756114
bio website ayrx.me
location Singapore
age 19
visits member for 2 years, 3 months
seen 11 hours ago

Currently a student studying IT security.


Oct
28
reviewed Reject suggested edit on How to provide security for passwords stored in Database?
Oct
28
reviewed No Action Needed How can one Build a Chain of trust using TPM?
Oct
28
reviewed Approve suggested edit on German police malware “Staatstrojaner” general question
Oct
28
reviewed Close Location of server affects the speed of page loading?
Oct
27
reviewed Reject suggested edit on How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
Oct
27
reviewed Approve suggested edit on How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
Oct
25
reviewed Approve suggested edit on Is this site vulnerable to sql injection?
Oct
25
reviewed Close Securing MS Exchange
Oct
25
reviewed No Action Needed Do i need SSL certificate signed by a CA for hybrid mobile apps?
Oct
24
reviewed Approve suggested edit on the Informix password crack
Oct
23
reviewed Reject suggested edit on What are the laws regarding ISP recording IP addresses? How would they know who had which?
Oct
22
revised Are there any security related rules in PCI-DSS that govern when I can capture a payment?
rolled back to a previous revision
Oct
22
reviewed Leave Open Are there any security related rules in PCI-DSS that govern when I can capture a payment?
Oct
22
reviewed Approve suggested edit on What's the purpose? Strange login attemps “sshd[***] Received disconnect from **.**.**.**: 11: Bye Bye [preauth]”
Oct
22
reviewed Approve suggested edit on SQL injection across multiple tables
Oct
21
awarded  Nice Answer
Oct
20
answered Preventing exploits like ROP and Return-to-libc in modern Operating systems
Oct
20
awarded  Announcer
Oct
20
comment May I `store` the password, by making it the key in AES-256?
@LuciferOrichalcum I dump your database. I have the username, R and E. I randomly try deriving P and K through a bruteforce or dictionary attack by guessing the password until I find a value where E = encrypt(k,P). Your scheme does not protect against this at all.
Oct
20
revised May I `store` the password, by making it the key in AES-256?
added 9 characters in body