22,591 reputation
647106
bio website infosecstudent.com
location Singapore
age 19
visits member for 1 year, 10 months
seen 1 hour ago

Currently a student studying IT security.


Apr
11
comment Is there any point in using 'strong' passwords?
@Pacerier security.stackexchange.com/a/31846/10211
Apr
5
comment Is Telegram secure?
@Luc I really wish I can downvote comments. Really? Non-standard crypto doesn't make you nervous? Do you want to encourage people to use crypto protocols without strong theoretical foundations? What happens when adoption reaches critical mass and a serious vulnerability is found? Yes, protocols need to be designed by people. But the people designing them should be trained cryptographers and the protocol needs to be peer reviewed by other trained cryptographers.
Apr
4
comment Is Telegram secure?
"A non-standard crypto is not necesarilly less secure." Every single respectable cryptographer in the world will disagree with you.
Mar
26
comment WordPress Private Expoit?
This is blatantly untrue. Wordpress like any other software out there has vulnerabilities. misconfigured servers definitely isn't the only way Wordpress sites get owned.
Mar
9
comment How secure is Java's hashCode()?
@BenVoigt I suggest you take an introductory crypto course before calling the recommendations of others "terrible".
Mar
4
comment user authentication my method (reinventing the wheel) is this secure?
No, I don't know PHP well enough to have confidence in any one library.
Mar
4
comment Are virtual keyboards themselves secure?
We can't answer this. It depends on the keyboard in question.
Feb
22
comment Is using SHA-512 for storing passwords tolerable?
@w3d You are thinking about an online bruteforce. Hashing is really only relevant when talking about offline bruteforce attacks after your database has been dumped.
Feb
14
comment How do I use nmap to scan a range of IPv6 addresses?
It says right there.... the -6 flag enables IPv6 scanning...
Feb
14
comment How do I use nmap to scan a range of IPv6 addresses?
This question appears to be off-topic because it is about reading the help page of the tool you are using....
Feb
5
comment Describe an example of indistinguishability obfuscation or functional encryption
Just waiting for an answer from The Bear here. :P
Feb
5
comment ASLR: why do only 12 bits change on 32bit system?
Short answer is yes: ASLR is of limited effectiveness on 32-bit binaries because the address space is that much smaller.
Feb
4
comment About password_hash() in PHP and storing (part of) its salt outside DB
@Stephane I don't consider that a downside. Frankly, if that proves to be a problem you need a better CPU. Throttling login attempts should also help.
Feb
4
comment Managing and storing lots of SSH keys in the cloud
I took out the product recommendation bit. It's generally not allowed on a Stackexchange site.
Feb
3
comment Implementation language for crypto
+1 for "If you are weary of life, use C++."
Feb
2
comment Why do multiple IP Addresses in my local network point to the same computer?
Can you edit the full nmap output into your question?
Jan
31
comment Difference between password expiration and account expiration
I know... what application are you talking about..? There is no reasonable answer for this question as it is very implementation dependent.
Jan
31
comment Difference between password expiration and account expiration
Difference where?
Jan
23
comment What are the security risks associated with storing passwords on the internet?
@Celeritas It's not "automatically insecure". You ask about risks. It's a risk you take if you entrust your passwords with a service that you cannot verify. Can you accept that risk? I cannot so I use KeePass, which I can verify. If you can accept the risk, go ahead with LastPass. No one is stopping you...
Jan
23
comment What are the security risks associated with storing passwords on the internet?
@Celeritas Yes, because the source code is available.