meta user
network profile
| bio | website | infosecstudent.com |
|---|---|---|
| location | Singapore | |
| age | 18 | |
| visits | member for | 1 year |
| seen | 21 mins ago | |
| stats | profile views | 624 |
Currently a student studying IT security.
|
May 2 |
comment |
How to effectively save database password inside desktop application? @dendini Your scenario IS a chicken or egg problem. Hardcoding the password into the application binary is not an option. Simple reverse engineering will reveal the password, even if you try to obfuscate it. Storing it somewhere on the filesystem is not an option either, any attacker with access to the computer can simply pull the password from the system. And obviously storing it in the database is not an option.... |
|
May 2 |
comment |
Is the execution time for bcrypt independent of the length of the input string? @mmcnickle wait for a mod to migrate it. |
|
May 1 |
comment |
Web application security standards/certificates @agelastic I might be mistaken but I don't think he was being serious about that... |
|
May 1 |
comment |
Why my Email are received in the spam folder? Because you are spamming them. DUH! |
|
Apr 29 |
comment |
What are the risks of a localhost signed cerificate? possible duplicate of What are the risks of self signing a certificate for SSL |
|
Apr 28 |
comment |
What are the practical uses of large asymmetric keys? Is the mathematician half mad because he discovers a killer algorithm for integer factorization, or is he half mad because he is a mathematician? |
|
Apr 28 |
comment |
Asymmetric encryption algorithms Where exactly did you read that? |
|
Apr 27 |
comment |
Securely notify users about account changes Wouldn't it be better to send a confirmation email to the old address? |
|
Apr 23 |
comment |
Application access control and time-keeping software en.wikipedia.org/wiki/Active_Directory |
|
Apr 23 |
comment |
Can i get 100% protection from virus by using Deep Freeze? This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post. |
|
Apr 22 |
comment |
How can I circumvent the lack of Java updates? Keep your internet surfing to better patched machines and just use your unpatched machines for whatever important software you need. |
|
Apr 22 |
comment |
How can I circumvent the lack of Java updates? @vlad Ah see, "have a bunch of computers which need Java for some important software..." and "simple surfing" just isn't matching up. You shouldn't be allowing people to surf the internet from unpatched machines running important software... |
|
Apr 22 |
comment |
How can I circumvent the lack of Java updates? @vlad How are the machines getting infected? |
|
Apr 22 |
comment |
How to use NMap to portscan a SonicWall that is blocking all attemtps? Do you mind rescanning with the --packet-trace flag enabled? |
|
Apr 19 |
comment |
Could you attack a port without knowing what service was listening? Google "port scanning". |
|
Apr 17 |
comment |
Is Using MD5 Sufficient Reason to Reject This Payment Processor? Thanks, I was previously confused only because I did not notice that the secret key wasn't being sent over the form as well. |
|
Apr 17 |
comment |
Is Using MD5 Sufficient Reason to Reject This Payment Processor? I must admit I'm not all that familiar with the way APIs sign their request. It just seems weird to me that the thing being used to verify integrity is being sent over the same form. I guess some reading up is in order. |
|
Apr 17 |
comment |
Is Using MD5 Sufficient Reason to Reject This Payment Processor? But the signature being sent over the same form as the parameters? I dunno.. sounds weird to me. |
|
Apr 17 |
comment |
Using MD5 for file integrity checks? @TomLeek Roger, made the edits. |
|
Apr 16 |
comment |
Sharing Nmap scan results in a web page @grauwulf Sure, but I have never found myself in the middle ground where I need something different. It's either a large project where I have to do multiple scans, in which case the msframework works wonders, or a small enough one where I just dump the files in a directory and use CLI tools like ndiff. |
