24,472 reputation
759119
bio website ayrx.me
location Singapore
age 19
visits member for 2 years, 6 months
seen 13 hours ago

Currently a student studying IT security.


May
1
answered Whenever an unhandled exception somehow makes it into production, is it safe, viable, etc. to print an encrypted stack trace to the end user?
Apr
30
answered How to access directories disallowed in robots.txt?
Apr
29
awarded  Enlightened
Apr
29
awarded  Nice Answer
Apr
27
comment Fomat String vulnerability used to display data outside the function stack frame?
@AbbasJavan Think about what a stack frame actually is. In x86-speak, it is the part of the stack between the esp and ebp. You can still read from outside the stack frame.
Apr
26
answered Fomat String vulnerability used to display data outside the function stack frame?
Apr
26
awarded  Good Answer
Apr
24
awarded  cryptography
Apr
23
comment How do big companies ensure that other people don't register a new top level domain with their name?
Google employs thousands of people sitting in front of computers whose sole job is snatching up domain names when they become available.
Apr
23
answered Is there a general name for this sort of cryptographic protocol?
Apr
22
awarded  Good Answer
Apr
22
comment How different should passwords be?
1. You should not generated passwords ONLINE. This doesn't mean that you shouldn't generate passwords locally on your computer.... 2. Yes, it's called keepass and dropbox.
Apr
22
comment How different should passwords be?
@Celeritas Password managers.....
Apr
22
answered How different should passwords be?
Apr
20
comment Length-constant password comparison in scrypt?
And which part of the accepted answer isn't clear? No, timing attacks aren't really relevant to hashing.
Apr
14
awarded  Nice Question
Apr
14
answered Advantages of one time pad
Apr
11
comment Is there any point in using 'strong' passwords?
@Pacerier security.stackexchange.com/a/31846/10211
Apr
5
comment Is Telegram secure?
@Luc I really wish I can downvote comments. Really? Non-standard crypto doesn't make you nervous? Do you want to encourage people to use crypto protocols without strong theoretical foundations? What happens when adoption reaches critical mass and a serious vulnerability is found? Yes, protocols need to be designed by people. But the people designing them should be trained cryptographers and the protocol needs to be peer reviewed by other trained cryptographers.
Apr
4
comment Is Telegram secure?
"A non-standard crypto is not necesarilly less secure." Every single respectable cryptographer in the world will disagree with you.