25,501 reputation
862125
bio website ayrx.me
location Singapore
age 19
visits member for 2 years, 7 months
seen 26 mins ago

This is not the profile you are looking for.


Feb
5
comment Describe an example of indistinguishability obfuscation or functional encryption
Just waiting for an answer from The Bear here. :P
Feb
5
comment ASLR: why do only 12 bits change on 32bit system?
Short answer is yes: ASLR is of limited effectiveness on 32-bit binaries because the address space is that much smaller.
Feb
4
comment About password_hash() in PHP and storing (part of) its salt outside DB
@Stephane I don't consider that a downside. Frankly, if that proves to be a problem you need a better CPU. Throttling login attempts should also help.
Feb
4
comment Managing and storing lots of SSH keys in the cloud
I took out the product recommendation bit. It's generally not allowed on a Stackexchange site.
Feb
3
comment Implementation language for crypto
+1 for "If you are weary of life, use C++."
Feb
2
comment Why do multiple IP Addresses in my local network point to the same computer?
Can you edit the full nmap output into your question?
Jan
31
comment Difference between password expiration and account expiration
I know... what application are you talking about..? There is no reasonable answer for this question as it is very implementation dependent.
Jan
31
comment Difference between password expiration and account expiration
Difference where?
Jan
23
comment What are the security risks associated with storing passwords on the internet?
@Celeritas It's not "automatically insecure". You ask about risks. It's a risk you take if you entrust your passwords with a service that you cannot verify. Can you accept that risk? I cannot so I use KeePass, which I can verify. If you can accept the risk, go ahead with LastPass. No one is stopping you...
Jan
23
comment What are the security risks associated with storing passwords on the internet?
@Celeritas Yes, because the source code is available.
Jan
21
comment Basic Security Knowledge
@RattleSnake That is sadly not how the Stackexchange network works. We focus on answering one specific question at a time. This isn't a traditional forum where posts can be pinned to the top of the page.
Jan
15
comment What is the ultimate goal of hacking a webserver?
@Hless Simple enough things like affiliate links or getting hired to send spam about certain topics. Renting out botnets for various activities are very profitable.
Jan
15
comment What kind of dictionaries can be created from a normal dictionary?
"What other converting methods exists in the world?" There is literally no end to the answers you can receive....
Jan
15
comment How to store passphrase in this situation?
You still need to provide more information. Is the app in question a desktop app or something that will be running in a JEE app server? App servers do provide a fairly robust means of storing such passwords.
Jan
6
comment Sharing login session from one website to another?
en.wikipedia.org/wiki/Single_sign-on
Jan
2
comment Custom rest api / client security scheme
@user36581 No, why pass hashed passwords? Hash them on the server side.
Dec
28
comment Is there any useful Android app for security assessments?
"I have seen a couple of non-closed questions about recommended books" In general, those are old questions during the site's infancy where the rules are less strict. Nowadays, such questions would be considered "product recommendation" questions and I have voted to close this as such. :)
Dec
24
comment Do simple Linux servers really need a non-root user for security reasons?
Good points, but that last one can be (somewhat) mitigated by not allowing password-based logins.
Dec
23
comment Considerations for security release notes
What is your "product"? An actual installable piece of software? A web app?
Dec
23
comment Buffer Overflow on Raspberry PI
@Gilles "All devices running OSX..." I might have missed something but... what?