27,211 reputation
867134
bio website ayrx.me
location Singapore
age 20
visits member for 2 years, 10 months
seen 4 mins ago

This is not the profile you are looking for.


Nov
24
answered “Diffie-Hellman Key Exchange” in plain English
Nov
24
reviewed Leave Open What does it mean to have a “file name with NULL bytes in serialized instances”?
Nov
23
reviewed Reject Does semi-sensitive information demand encryption / security?
Nov
23
reviewed Reject Is it generally a bad idea to encrypt database fields?
Nov
23
reviewed Reject Ways to monitor someone's internet traffic
Nov
23
reviewed Reject Best practice for password distribution
Nov
23
answered Use the hash of the password to encrypted password
Nov
23
reviewed Approve What is the hack attempt going on when I see: did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Nov
22
comment Is HMAC-SHA256 and HMAC-SHA512 able to act as drop in replacement for HMAC-SHA1 in HOTP/TOTP?
Yes, not questioning the point about improving security. My question is more about finding out if the algorithms are officially supported by the RFC. Given that TOTP is essentially the same algorithm as HOTP, won't the two algorithms work for HOTP as well?
Nov
22
comment Is HMAC-SHA256 and HMAC-SHA512 able to act as drop in replacement for HMAC-SHA1 in HOTP/TOTP?
"Obviously, these two hash algorithm aren't supported by the standard." So why is HMAC-SHA256 and HMAC-SHA512 described in RFC 6238? Test vectors are even provided.
Nov
22
asked Is HMAC-SHA256 and HMAC-SHA512 able to act as drop in replacement for HMAC-SHA1 in HOTP/TOTP?
Nov
21
reviewed Approve Wordlists on Kali Linux?
Nov
21
comment Is “Why Should You Avoid AES In MySQL?” true?
possible duplicate of Is it preferable to perform encryption using database functions or code?
Nov
21
reviewed Approve Why would it be a good idea for someone to get or not to get a Yubi key
Nov
21
reviewed Reject Should we force user to HTTPS on website?
Nov
21
reviewed Close backtrack or kali linux ??? Which is best for a beginner pen tester ?
Nov
21
reviewed Approve Adobe Install Redirect
Nov
20
answered Where to publish security research?
Nov
19
comment How secure is NOPASSWD in passwordless sudo mode?
@JurianSluiman It's good that you know that, wasn't very clear coming from the question. NOPASSWD is really more of a convenience option and doesn't really affect security that much imo. It's more important to ensure that users are given only as much sudo privileges as required to get the job done.
Nov
19
answered How secure is NOPASSWD in passwordless sudo mode?