23,765 reputation
755113
bio website infosecstudent.com
location Singapore
age 19
visits member for 2 years, 2 months
seen 7 hours ago

Currently a student studying IT security.


May
18
comment How to prevent restrict access to a web application to authorized devices only?
@user1650894 Updated.
May
14
comment How can I send and receive untraceable emails?
Call the police...
May
13
comment How can I punish a hacker?
@hydroparadise If you live in the USA and a robber robs your house you report it to the local corps. What happens if you live in the USA, host your website using a server located in a datacenter in Japan, was attacked by a French hacker using a compromised machine in China? Who do you report it to? Which law enforcement agency is going to arrest the guy?
May
12
comment Why is WPA Enterprise more secure than WPA2?
@Unw0und No, EAP is an authentication protocol while TKIP and CCMP is an encryption protocol.
May
10
comment Is salting a hash really as secure as common knowledge implies?
@ThomasAndreèLian IF you want to learn, pick a known good algorithm like bcrypt and implement it yourself. This has two advantages - 1) You actually learn something useful. 2) You get test cases which you can use to verify if your implementation is broken.
May
9
comment Are there any Windows permissions management applications?
@BradJanke I'm not sure if they have the exact equivalent. I'm more of a linux guy myself so I'm not very familiar with the commands. They do have commands that will allow you to accomplish similar goals though. It's worth taking the effort to learn it if you are going to be doing a lot of Windows administration work.
May
8
comment CAPTCHA Weakness to Automated Attack
No dude... I said they prevented online attacks.....
May
7
comment HTTPS firewall rule
Just set the firewall on your client to accept packets with source port 443 and drop the rest....
May
7
comment How to encrypt data on the server?
What exactly is your threat model?
May
7
comment How does Google Authenticator work?
@MarioAwad The answer to that can be found on the HOTP RFC, section 7.4. ietf.org/rfc/rfc4226.txt
May
2
comment US Department of Labor Watering Hole Attack
@John You can be surprised how powerful JS can be especially if there exist vulnerabilities in the browser that allows JS to break out of the sandbox.
May
2
comment US Department of Labor Watering Hole Attack
@John From the article you linked "This has been exploited in the wild since December and was patched earlier this year by Microsoft." ....
May
2
comment How to effectively save database password inside desktop application?
@dendini Your scenario IS a chicken or egg problem. Hardcoding the password into the application binary is not an option. Simple reverse engineering will reveal the password, even if you try to obfuscate it. Storing it somewhere on the filesystem is not an option either, any attacker with access to the computer can simply pull the password from the system. And obviously storing it in the database is not an option....
May
2
comment Is the execution time for bcrypt independent of the length of the input string?
@mmcnickle wait for a mod to migrate it.
May
1
comment Web application security standards/certificates
@agelastic I might be mistaken but I don't think he was being serious about that...
May
1
comment Why my Email are received in the spam folder?
Because you are spamming them. DUH!
Apr
29
comment What are the risks of a localhost signed cerificate?
possible duplicate of What are the risks of self signing a certificate for SSL
Apr
28
comment What are the practical uses of large asymmetric keys?
Is the mathematician half mad because he discovers a killer algorithm for integer factorization, or is he half mad because he is a mathematician?
Apr
28
comment Asymmetric encryption algorithms
Where exactly did you read that?
Apr
27
comment Securely notify users about account changes
Wouldn't it be better to send a confirmation email to the old address?