25,088 reputation
761121
bio website ayrx.me
location Singapore
age 19
visits member for 2 years, 6 months
seen 3 hours ago

This is not the profile you are looking for.


Oct
28
reviewed Approve German police malware “Staatstrojaner” general question
Oct
28
reviewed Close Location of server affects the speed of page loading?
Oct
27
reviewed Reject How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
Oct
27
reviewed Approve How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
Oct
25
reviewed Approve Is this site vulnerable to sql injection?
Oct
25
reviewed Close Securing MS Exchange
Oct
25
reviewed No Action Needed Do i need SSL certificate signed by a CA for hybrid mobile apps?
Oct
24
reviewed Approve the Informix password crack
Oct
23
reviewed Reject What are the laws regarding ISP recording IP addresses? How would they know who had which?
Oct
22
revised Are there any security related rules in PCI-DSS that govern when I can capture a payment?
rolled back to a previous revision
Oct
22
reviewed Leave Open Are there any security related rules in PCI-DSS that govern when I can capture a payment?
Oct
22
reviewed Approve What's the purpose? Strange login attemps “sshd[***] Received disconnect from **.**.**.**: 11: Bye Bye [preauth]”
Oct
22
reviewed Approve SQL injection across multiple tables
Oct
21
awarded  Nice Answer
Oct
20
answered Preventing exploits like ROP and Return-to-libc in modern Operating systems
Oct
20
awarded  Announcer
Oct
20
comment May I `store` the password, by making it the key in AES-256?
@LuciferOrichalcum I dump your database. I have the username, R and E. I randomly try deriving P and K through a bruteforce or dictionary attack by guessing the password until I find a value where E = encrypt(k,P). Your scheme does not protect against this at all.
Oct
20
revised May I `store` the password, by making it the key in AES-256?
added 9 characters in body
Oct
20
comment May I `store` the password, by making it the key in AES-256?
@LuciferOrichalcum You derive the key for AES encryption by hashing the password ONCE. This is trivial to bruteforce and has no bearing on the strength of AES as an encryption algorithm. It's fine for most things to want to try something new, but cryptography is not one of them. Stick with well tested schemes instead....
Oct
20
answered May I `store` the password, by making it the key in AES-256?