meta user
network profile
| bio | website | infosecstudent.com |
|---|---|---|
| location | Singapore | |
| age | 18 | |
| visits | member for | 1 year |
| seen | 33 mins ago | |
| stats | profile views | 554 |
Currently a student studying IT security.
|
May 21 |
comment |
Ways to look for changes on a PC They secretly installed Skynet on your computer so it will take over the world in 10 years. |
|
May 21 |
comment |
Is KeePass a good defense against keyloggers? I can think of another strong defense against keyloggers. You know... don't get a keylogger in the first place! :) |
|
May 18 |
comment |
User entered Javascript security implications possible duplicate of User entered Javascript security implications |
|
May 18 |
comment |
What do web trackers know about/think of me? They think you are hawt obviously. |
|
May 18 |
comment |
How to prevent restrict access to a web application to authorized devices only? @user1650894 Updated. |
|
May 14 |
comment |
How can I send and receive untraceable emails? Call the police... |
|
May 13 |
comment |
How can I punish a hacker? @hydroparadise If you live in the USA and a robber robs your house you report it to the local corps. What happens if you live in the USA, host your website using a server located in a datacenter in Japan, was attacked by a French hacker using a compromised machine in China? Who do you report it to? Which law enforcement agency is going to arrest the guy? |
|
May 12 |
comment |
Why is WPA Enterprise more secure than WPA2? @Unw0und No, EAP is an authentication protocol while TKIP and CCMP is an encryption protocol. |
|
May 10 |
comment |
Is salting a hash really as secure as common knowledge implies? @ThomasAndreèLian IF you want to learn, pick a known good algorithm like bcrypt and implement it yourself. This has two advantages - 1) You actually learn something useful. 2) You get test cases which you can use to verify if your implementation is broken. |
|
May 9 |
comment |
Are there any Windows permissions management applications? @BradJanke I'm not sure if they have the exact equivalent. I'm more of a linux guy myself so I'm not very familiar with the commands. They do have commands that will allow you to accomplish similar goals though. It's worth taking the effort to learn it if you are going to be doing a lot of Windows administration work. |
|
May 8 |
comment |
CAPTCHA Weakness to Automated Attack No dude... I said they prevented online attacks..... |
|
May 7 |
comment |
HTTPS firewall rule Just set the firewall on your client to accept packets with source port 443 and drop the rest.... |
|
May 7 |
comment |
How to encrypt data on the server? What exactly is your threat model? |
|
May 7 |
comment |
How does Google Authenticator work? @MarioAwad The answer to that can be found on the HOTP RFC, section 7.4. ietf.org/rfc/rfc4226.txt |
|
May 2 |
comment |
US Department of Labor Watering Hole Attack @John You can be surprised how powerful JS can be especially if there exist vulnerabilities in the browser that allows JS to break out of the sandbox. |
|
May 2 |
comment |
US Department of Labor Watering Hole Attack @John From the article you linked "This has been exploited in the wild since December and was patched earlier this year by Microsoft." .... |
|
May 2 |
comment |
How to effectively save database password inside desktop application? @dendini Your scenario IS a chicken or egg problem. Hardcoding the password into the application binary is not an option. Simple reverse engineering will reveal the password, even if you try to obfuscate it. Storing it somewhere on the filesystem is not an option either, any attacker with access to the computer can simply pull the password from the system. And obviously storing it in the database is not an option.... |
|
May 2 |
comment |
Is the execution time for bcrypt independent of the length of the input string? @mmcnickle wait for a mod to migrate it. |
|
May 1 |
comment |
Web application security standards/certificates @agelastic I might be mistaken but I don't think he was being serious about that... |
|
May 1 |
comment |
Why my Email are received in the spam folder? Because you are spamming them. DUH! |
