22,591 reputation
647106
bio website infosecstudent.com
location Singapore
age 19
visits member for 1 year, 10 months
seen 1 min ago

Currently a student studying IT security.


Apr
28
comment What are the practical uses of large asymmetric keys?
Is the mathematician half mad because he discovers a killer algorithm for integer factorization, or is he half mad because he is a mathematician?
Apr
28
comment Asymmetric encryption algorithms
Where exactly did you read that?
Apr
27
comment Securely notify users about account changes
Wouldn't it be better to send a confirmation email to the old address?
Apr
23
comment Can i get 100% protection from virus by using Deep Freeze?
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post.
Apr
22
comment How can I circumvent the lack of Java updates?
Keep your internet surfing to better patched machines and just use your unpatched machines for whatever important software you need.
Apr
22
comment How can I circumvent the lack of Java updates?
@vlad Ah see, "have a bunch of computers which need Java for some important software..." and "simple surfing" just isn't matching up. You shouldn't be allowing people to surf the internet from unpatched machines running important software...
Apr
22
comment How can I circumvent the lack of Java updates?
@vlad How are the machines getting infected?
Apr
19
comment Could you attack a port without knowing what service was listening?
Google "port scanning".
Apr
17
comment Is Using MD5 Sufficient Reason to Reject This Payment Processor?
Thanks, I was previously confused only because I did not notice that the secret key wasn't being sent over the form as well.
Apr
17
comment Is Using MD5 Sufficient Reason to Reject This Payment Processor?
I must admit I'm not all that familiar with the way APIs sign their request. It just seems weird to me that the thing being used to verify integrity is being sent over the same form. I guess some reading up is in order.
Apr
17
comment Is Using MD5 Sufficient Reason to Reject This Payment Processor?
But the signature being sent over the same form as the parameters? I dunno.. sounds weird to me.
Apr
17
comment Using MD5 for file integrity checks?
@TomLeek Roger, made the edits.
Apr
16
comment Sharing Nmap scan results in a web page
@grauwulf Sure, but I have never found myself in the middle ground where I need something different. It's either a large project where I have to do multiple scans, in which case the msframework works wonders, or a small enough one where I just dump the files in a directory and use CLI tools like ndiff.
Apr
15
comment With ASIC bitcoin miners, should SHA256 be considered insecure for password hashing?
@Earlz Most programmers know nothing about security.
Apr
14
comment Make online payments anonymously?
Not quite true. :) blog.cryptographyengineering.com/2013/04/…
Apr
13
comment Can DD on its own be used to acquire a hard drive?
@BrianAdkins Blah, thanks. Fixed that.
Apr
11
comment Is there a way to encrypt an existing ext4 filesystem with already data on it?
@user1451340 If he is using a EXT4 file system, it is a safe enough bet he is using linux....
Apr
9
comment How can I protect my internet-connected devices from discovery by Shodan?
@Aarthi +1-ed..
Apr
9
comment I found a virus on my USB stick. Now what?
@Vorac Change all your passwords. Treat backups as you would a computer. If it has been in contact with the USB drive in the suspected period, it has to go.
Apr
5
comment Is it compulsory to have https on e-commerce site?
Why is this downvoted? Nothing wrong with it. +1