Reputation
10,478
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
2 17 61
Newest
 Announcer
Impact
~613k people reached

May
25
comment Do any security experts recommend bcrypt for password storage?
As a quick note, I personally take either bcrypt or pbkdf2 (depending on the platform) and benchmark different settings. Depending on what I'm using it for I use settings that cause it to take a given time. Like for a desktop application I'd aim around 80ms (I have a relatively fast laptop), or for a server I'd benchmark on the server and aim depending on what traffic I'm expecting.
May
24
reviewed Edit Pursuing a career in Malware Analysis
May
24
revised Pursuing a career in Malware Analysis
corrected spelling and gramatical mistakes
May
21
comment What chars should I not allow in passwords?
@this.josh do it, then.
May
20
reviewed Reject Is possible to exploit C#, Java, Python or any language that is running inside VM (i.e. managed runtime)
May
17
comment Is Adblock (Plus) a security risk?
Oh sorry, my mistake. I assumed so since your post is more towards the bottom than the one that originally mentioned it (oftentimes posts are very roughly in chronological order), but of course I should have checked. I stand corrected :)
May
17
comment Is Adblock (Plus) a security risk?
"Something no-one has mentioned here is that Adblock plus along almost all other browsers and extensions can be updated remotely." Read again; this has been mentioned.
May
17
comment Is Adblock (Plus) a security risk?
"I've reviewed the source and I can safely say I haven't any idea at all what's going on. Source: I am a JavaScript and Chrome Extension developer." So you are a developer who cannot read code? Either that, or you only looked at the code for 40 seconds without reading it. Either way, good job of trying to scare users, you've successfully made it into the FUD ranks of GMX. Do you also happen to work in the advertisements industry?
May
17
revised Is Adblock (Plus) a security risk?
deleted 11 characters in body
May
13
reviewed Approve Looking for OpenSC compatibile token
May
13
reviewed Approve What should you do if you cannot spawn a shell in a buffer overflow attack?
May
13
reviewed Approve How to ensure that files uploaded by users do not contain any Javascript
May
11
reviewed Approve How do countries block encrypted protocols like Skype?
May
11
comment Record IP pseudonymously?
In short, I'd drop the last 8 bits from an IPv4 address (IPv6 is different, I could elaborate in an answer). If under DoS attack, make a note of the exact IP address or addresses and block those.
May
11
comment Record IP pseudonymously?
"IP addresses aren't usually considered private information" YMMV. It depends on the country, person and even context. I personally do consider an IP relatively private information. To make them more anonymous, I see no reason why you can't drop the most identifying bits, depending on the context that may be the last 8 or 16 bits of an IPv4 address.
May
11
reviewed Approve Can a sysadmin spy on a Wifi connection?
May
10
reviewed Approve Record IP pseudonymously?
May
10
reviewed Approve How to effectivily block torrents on my network?
May
10
reviewed Approve How to identify hashing algorithm
May
9
reviewed Approve What can a web application developer do to protect user information from powerful adversaries like the NSA or China