58 reputation
16
bio website
location
age
visits member for 2 years, 2 months
seen Aug 19 at 12:21

I am here to learn and learn until I become fit enough to teach.


Aug
5
comment How did the Tweetdeck XSS Vulnerability work
g-liu.com/blog/2014/06/… - kindly check if this helps.
Jul
24
awarded  Citizen Patrol
Jul
23
awarded  Scholar
Jul
23
accepted Does the SSL termination happen with the ISP or a mobile service provider?
Jul
22
asked Does the SSL termination happen with the ISP or a mobile service provider?
Feb
5
awarded  Notable Question
Feb
3
awarded  Organizer
Feb
3
revised XSS : Blacklist characters vs. whitelist
Added OWASP as a tag
Feb
3
suggested suggested edit on XSS : Blacklist characters vs. whitelist
Dec
18
awarded  Supporter
Apr
28
awarded  Popular Question
Dec
14
awarded  Student
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Polynomial, first thank you very much for the very descriptive answer, as long as I store the secret key too secretive, HMAC should be better than CPU intensive operations with bcrypt/scrypt , that would make an online user wait until he logs in?
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Jacco - I am sorry, I have read through the question and the answers pointed out , but was not able to get an answer I required.
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@curiousguy - that is what I am trying to understand , as far as my knowledge goes, HMAC is little more secure than a hash , since it requires a key .
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Terry Chia - I have read somewhere and ve seen implementations that use HMAC for a password.
Jul
5
comment Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
@Roy Alsop - Yes , brute force attack.
Jul
4
asked Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?