25,069 reputation
761121
bio website ayrx.me
location Singapore
age 19
visits member for 2 years, 6 months
seen 1 hour ago

This is not the profile you are looking for.


May
2
comment Secure and fast communication between 2 VM's
@Jdeboer You need to develop a threat model so you know exactly what you want to protect against. Ok, you are using cloud instances. In that case I would encrypt the data instead of relying on the service provider for anything. Many databases like MySQL offers connections over SSL. Is that an option?
May
1
comment Whenever an unhandled exception somehow makes it into production, is it safe, viable, etc. to print an encrypted stack trace to the end user?
@Panzercrisis Think javascript-heavy web apps where application logic lives on the client instead of the server.
Apr
27
comment Fomat String vulnerability used to display data outside the function stack frame?
@AbbasJavan Think about what a stack frame actually is. In x86-speak, it is the part of the stack between the esp and ebp. You can still read from outside the stack frame.
Apr
23
comment How do big companies ensure that other people don't register a new top level domain with their name?
Google employs thousands of people sitting in front of computers whose sole job is snatching up domain names when they become available.
Apr
22
comment How different should passwords be?
1. You should not generated passwords ONLINE. This doesn't mean that you shouldn't generate passwords locally on your computer.... 2. Yes, it's called keepass and dropbox.
Apr
22
comment How different should passwords be?
@Celeritas Password managers.....
Apr
20
comment Length-constant password comparison in scrypt?
And which part of the accepted answer isn't clear? No, timing attacks aren't really relevant to hashing.
Apr
11
comment Is there any point in using 'strong' passwords?
@Pacerier security.stackexchange.com/a/31846/10211
Apr
5
comment Is Telegram secure?
@Luc I really wish I can downvote comments. Really? Non-standard crypto doesn't make you nervous? Do you want to encourage people to use crypto protocols without strong theoretical foundations? What happens when adoption reaches critical mass and a serious vulnerability is found? Yes, protocols need to be designed by people. But the people designing them should be trained cryptographers and the protocol needs to be peer reviewed by other trained cryptographers.
Apr
4
comment Is Telegram secure?
"A non-standard crypto is not necesarilly less secure." Every single respectable cryptographer in the world will disagree with you.
Mar
26
comment WordPress Private Expoit?
This is blatantly untrue. Wordpress like any other software out there has vulnerabilities. misconfigured servers definitely isn't the only way Wordpress sites get owned.
Mar
9
comment How secure is Java's hashCode()?
@BenVoigt I suggest you take an introductory crypto course before calling the recommendations of others "terrible".
Mar
4
comment user authentication my method (reinventing the wheel) is this secure?
No, I don't know PHP well enough to have confidence in any one library.
Mar
4
comment Are virtual keyboards themselves secure?
We can't answer this. It depends on the keyboard in question.
Feb
22
comment Is using SHA-512 for storing passwords tolerable?
@w3d You are thinking about an online bruteforce. Hashing is really only relevant when talking about offline bruteforce attacks after your database has been dumped.
Feb
14
comment How do I use nmap to scan a range of IPv6 addresses?
It says right there.... the -6 flag enables IPv6 scanning...
Feb
14
comment How do I use nmap to scan a range of IPv6 addresses?
This question appears to be off-topic because it is about reading the help page of the tool you are using....
Feb
5
comment Describe an example of indistinguishability obfuscation or functional encryption
Just waiting for an answer from The Bear here. :P
Feb
5
comment ASLR: why do only 12 bits change on 32bit system?
Short answer is yes: ASLR is of limited effectiveness on 32-bit binaries because the address space is that much smaller.
Feb
4
comment About password_hash() in PHP and storing (part of) its salt outside DB
@Stephane I don't consider that a downside. Frankly, if that proves to be a problem you need a better CPU. Throttling login attempts should also help.