meta user
network profile
| bio | website | infosecstudent.com |
|---|---|---|
| location | Singapore | |
| age | 18 | |
| visits | member for | 11 months |
| seen | 1 hour ago | |
| stats | profile views | 552 |
Currently a student studying IT security.
|
Mar 10 |
comment |
How risky is it not to install ssl? @ribot See this question for an idea on how to start the risk analysis process: security.stackexchange.com/questions/21268/… |
|
Mar 8 |
comment |
Extended validation SSL certificates @Ladadadada is correct that this isn't a good question for StackExchange. Besides, the whole concept of EV certs and cheap doesn't really mix. |
|
Mar 8 |
comment |
Detecting Steganography in images This doesn't really add anything to the existing answers... |
|
Mar 7 |
comment |
How risky is it not to install ssl? @symcbean Ahh browser side performance. Yeah that does make somewhat of a difference. |
|
Mar 7 |
comment |
How risky is it not to install ssl? I agree with @CodesInChaos, the performance hit isn't that great, especially for a small to medium sized site. |
|
Mar 7 |
comment |
Reading for starter in Computer System Security Hi cobie! This really isn't a good question for the site as it encourages list-type questions. Feel free to hop over to The DMZ, our chat room, to discuss about it though! I have got plenty of good book recommendations from there! |
|
Mar 6 |
comment |
Is Username/Display Name Login more secure than email login? This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post. |
|
Mar 5 |
comment |
Is it possible to block emails (to all email accounts) that contain certain word/phrase patterns? @camden_kid I was trying to emphasis legal as in - use the power of the law. Not implying blocking email is illegal. Sorry if you misunderstood. :) |
|
Mar 5 |
comment |
Is GPG suitable as part of a password manager and generator? @ttouch Ah see, that to me part is the key point. |
|
Mar 5 |
comment |
Is it possible to block emails (to all email accounts) that contain certain word/phrase patterns? Have you considered a more direct, legal action? |
|
Feb 27 |
comment |
What is the safest way to store a password in a single file? @user60108 If you need both encryption and authentication, I would use a scheme similar to this one: security.stackexchange.com/a/30197/10211 |
|
Feb 27 |
comment |
What is the safest way to store a password in a single file? @user60108 Is authentication and encryption separate? In other words, do you need authentication as well as encryption? If you only need encryption, a better way will be to just use pbkdf2 to derive a key from the password, encrypt using said key and discard the password/key. You can verify if the data is decrypted correctly by appending some predefined characters at the start of the plaintext before encryption and check for said characters after decryption. |
|
Feb 26 |
comment |
Facebook data visibility to admin staff @Polynomial Agreed. The first line provides an answer to the question: it is technically possible since the data isn't encrypted. I'm just adding that legally, Facebook has the right to read your data. :) |
|
Feb 26 |
comment |
Facebook data visibility to admin staff @mulllhausen If you are to disregard the legal side of it, it is definitely very possible. The Facebook part of the question is irrelevant. Any unencrypted data you send to servers outside your control can be read by admins of said server. Doesn't matter if said server is a $20/month VPS or a multi-billion dollar datacenter. |
|
Feb 25 |
comment |
All I see is RPC, how do I proceed? From the given information, it is unlikely that there is a vulnerability in the system as it has a very limited surface for potential attacks. |
|
Feb 25 |
comment |
Is it secure to transfer an RSA public key by email? @TC1 In this particular case, md5 works as well as any of the SHA algorithms. |
|
Feb 24 |
comment |
How to protect against an attack where a person claims to be in a position of authority? @Celeritas Have your employees carry around ID passes or something like that? While it isn't impossible to impersonate, it would certainly make things harder.. Basically just don't hand over important stuff to anyone who ask for it.. |
|
Feb 21 |
comment |
Ethernet security @Peleus A properly secured mobile modem belonging to you is certainly more secure than connecting to an unknown network... |
|
Feb 21 |
comment |
Arguments that proof a hashing scheme is sufficient Nothing more convincing than a quote from NIST eh. |
|
Feb 14 |
comment |
Brute force a GUI login? @MywikiWitwiki Clicking can most definitely be emulated programatically. The reason why the UAC prompt is secure is that it occurs in a totally separate desktop environment where only SYSTEM processes are allowed to run. This is a feature of the Windows operating system, nothing to do with GUI buttons whatsoever. |
