| bio | website | |
|---|---|---|
| location | Australia | |
| age | 22 | |
| visits | member for | 10 months |
| seen | May 16 at 12:46 | |
| stats | profile views | 15 |
|
Aug 14 |
awarded | Caucus |
|
Aug 4 |
answered | What are the go-to books on server security? |
|
Aug 4 |
revised |
Protecting passphrases within an application removed the none not stop |
|
Aug 4 |
comment |
Protecting passphrases within an application +1. Triviality of bypassing packing, obfuscation and anti-debug tricks |
|
Aug 4 |
comment |
Protecting passphrases within an application I agree with you. I wasn't trying to say any of those points was a solution. My opinion is to not worry about it or rethink what you are providing and how. The methods I shared you can use in an attempt to deter the average hacker. I need to rethink how share my thoughts. Thank you for the response :) |
|
Aug 4 |
comment |
Protecting passphrases within an application @polynomial - I didn't mean make your own algorithm (don't reinvent AES). I meant your own implementation of a standard in your code. That way you aren't referencing external libraries. |
|
Aug 4 |
answered | Are phone calls normally recorded? |
|
Aug 4 |
answered | Protecting passphrases within an application |
|
Aug 2 |
comment |
Is there more to password hashing? @Ramhound - I am aware of this. "Other methods not relevant to this question will have to be taken". I wanted to keep this question related to the password hashing process. So my thoughts were ignoring other interventions such as a good password policy. I really should of worded that section better :) |
|
Aug 2 |
awarded | Scholar |
|
Aug 2 |
accepted | Is there more to password hashing? |
|
Aug 2 |
awarded | Student |
|
Aug 2 |
asked | Is there more to password hashing? |
|
Aug 2 |
awarded | Commentator |
|
Aug 2 |
comment |
Why are passwords limited to 16 characters? I know a site that restricts passwords to [a-zA-Z]{1,5} It is a billing portal and it scares me :( |
|
Jul 22 |
awarded | Suffrage |
|
Jul 22 |
comment |
Recently received a odd email Typical scam. It takes you to a fake cnbc website with an article modified by your ip geo about someone who makes X dollars a month; all links go onto another website with a form asking for personal information. It will probably then try and get you to install some software. Unfortunately I didn't see anything special but I could of missed something. Take Terry Chia's advice. |
|
Jul 22 |
answered | What is cross-site-scripting? |
|
Jul 21 |
comment |
website hacked and all its content erased despite the protections @Paul - It could be. Who is in the files group? 755 is generally the ideal permission. |
|
Jul 21 |
revised |
website hacked and all its content erased despite the protections added 45 characters in body |