23,765 reputation
755113
bio website infosecstudent.com
location Singapore
age 19
visits member for 2 years, 2 months
seen 7 hours ago

Currently a student studying IT security.


Mar
26
comment WordPress Private Expoit?
This is blatantly untrue. Wordpress like any other software out there has vulnerabilities. misconfigured servers definitely isn't the only way Wordpress sites get owned.
Mar
9
comment How secure is Java's hashCode()?
@BenVoigt I suggest you take an introductory crypto course before calling the recommendations of others "terrible".
Mar
4
comment user authentication my method (reinventing the wheel) is this secure?
No, I don't know PHP well enough to have confidence in any one library.
Mar
4
comment Are virtual keyboards themselves secure?
We can't answer this. It depends on the keyboard in question.
Feb
22
comment Is using SHA-512 for storing passwords tolerable?
@w3d You are thinking about an online bruteforce. Hashing is really only relevant when talking about offline bruteforce attacks after your database has been dumped.
Feb
14
comment How do I use nmap to scan a range of IPv6 addresses?
It says right there.... the -6 flag enables IPv6 scanning...
Feb
14
comment How do I use nmap to scan a range of IPv6 addresses?
This question appears to be off-topic because it is about reading the help page of the tool you are using....
Feb
5
comment Describe an example of indistinguishability obfuscation or functional encryption
Just waiting for an answer from The Bear here. :P
Feb
5
comment ASLR: why do only 12 bits change on 32bit system?
Short answer is yes: ASLR is of limited effectiveness on 32-bit binaries because the address space is that much smaller.
Feb
4
comment About password_hash() in PHP and storing (part of) its salt outside DB
@Stephane I don't consider that a downside. Frankly, if that proves to be a problem you need a better CPU. Throttling login attempts should also help.
Feb
4
comment Managing and storing lots of SSH keys in the cloud
I took out the product recommendation bit. It's generally not allowed on a Stackexchange site.
Feb
3
comment Implementation language for crypto
+1 for "If you are weary of life, use C++."
Feb
2
comment Why do multiple IP Addresses in my local network point to the same computer?
Can you edit the full nmap output into your question?
Jan
31
comment Difference between password expiration and account expiration
I know... what application are you talking about..? There is no reasonable answer for this question as it is very implementation dependent.
Jan
31
comment Difference between password expiration and account expiration
Difference where?
Jan
23
comment What are the security risks associated with storing passwords on the internet?
@Celeritas It's not "automatically insecure". You ask about risks. It's a risk you take if you entrust your passwords with a service that you cannot verify. Can you accept that risk? I cannot so I use KeePass, which I can verify. If you can accept the risk, go ahead with LastPass. No one is stopping you...
Jan
23
comment What are the security risks associated with storing passwords on the internet?
@Celeritas Yes, because the source code is available.
Jan
21
comment Basic Security Knowledge
@RattleSnake That is sadly not how the Stackexchange network works. We focus on answering one specific question at a time. This isn't a traditional forum where posts can be pinned to the top of the page.
Jan
15
comment What is the ultimate goal of hacking a webserver?
@Hless Simple enough things like affiliate links or getting hired to send spam about certain topics. Renting out botnets for various activities are very profitable.
Jan
15
comment What kind of dictionaries can be created from a normal dictionary?
"What other converting methods exists in the world?" There is literally no end to the answers you can receive....