23,765 reputation
755113
bio website infosecstudent.com
location Singapore
age 19
visits member for 2 years, 2 months
seen 45 mins ago

Currently a student studying IT security.


Oct
17
reviewed Reject suggested edit on Should I use FileZilla?
Oct
17
reviewed No Action Needed What order is best for nesting VPNs?
Oct
17
reviewed No Action Needed Should I use FileZilla?
Oct
16
comment Is this password hashing + salt method the most secure way possible?
@Chrisgozd It looks ok, but you don't actually have to generate the salt separately unless you want to store it elsewhere. The HashPassword() function will automatically generate the salt for you.
Oct
16
reviewed No Action Needed Expose web service in a secure manner
Oct
16
reviewed Looks OK sqlmap unable to find SQL injection vulnerablitity
Oct
16
reviewed Approve suggested edit on How to secure my network, laptop, ipad and email accounts which are possibly hacked?
Oct
15
reviewed No Action Needed Do we need to logout of webapps?
Oct
15
revised Random Oracle existence and real world
added 77 characters in body
Oct
15
answered Random Oracle existence and real world
Oct
15
reviewed Close Android, how do I prevent Confused Deputy Attacks?
Oct
15
comment Is this password hashing + salt method the most secure way possible?
@Chrisgozd What exactly is BcryptDude? I hope you are just wrapping the Bcrypt.NET library in your own namespace and not rolling your own version of the algorithm...
Oct
15
reviewed Reject suggested edit on With BREACH attack, is session-based CSRF token still secure?
Oct
14
comment Linux: Blocking outside attempts at attacking computer
@Friendly RHEL-based systems has system-config-firewall. Not sure what the Debian-based one is called but a quick Google search will reveal the answer.
Oct
14
reviewed Reject suggested edit on How to “normalize” an html file?
Oct
14
answered Linux: Blocking outside attempts at attacking computer
Oct
14
comment Is this password hashing + salt method the most secure way possible?
@Chrisgozd Yes, RNGCryptoServiceProvider is a cryptographically secure RNG so you should be find there. With regards to iteration count, that depends on the hardware you are targeting. The correct answer will be as high as possible without introducing large delays for your users. So, profile profile profile.
Oct
14
revised Is this password hashing + salt method the most secure way possible?
edited tags
Oct
14
answered Is this password hashing + salt method the most secure way possible?
Oct
13
revised WordPress Comment Hacking Attempt
deleted 2 characters in body