1,015 reputation
312
bio website
location
age
visits member for 1 year, 9 months
seen 16 hours ago

Mar
11
answered Isolate dual system
Dec
28
awarded  Nice Answer
Nov
1
awarded  Nice Question
Sep
5
comment Why is password hashing considered so important?
@MaciejPiechotka Thanks for bringing up the point where in the case of bruteforcing hashes in a whole unsalted databases, computational time will be reduced by not having to recompute the same hash for each password. However lets also keep in mind that 1000s or more passwords to crack may be insignificant in the future when processors become exponentially faster, or so some have forecasted.
Sep
5
comment Why is password hashing considered so important?
@Andy Thank you for providing that link for me. I'm not sure where you are going with the purpose of a salt with my comment talking about computation time effects of hashing passwords with a salt.
Aug
30
comment Why is password hashing considered so important?
@Andy Actually, salting a password won't really effect the time it takes to brute-force. That is because if someone got the hash passwords, they could probably get the salt as well.
Aug
30
answered What is “download-new.com”?
Jul
17
awarded  Yearling
May
17
answered Vulnerability testing without the use of exploits?
May
12
comment Vulnerable OS's?
In addition, Windows Server 2003 with no patches would be a good start.
Apr
17
answered How do random attackers discover websites to target?
Apr
17
awarded  Popular Question
Apr
12
answered how can you inject malicious code into an innocent-looking URL?
Apr
10
comment Is there additional security value in using passwords with words or phrases in non-English languages?
@IlmariKaronen Genius!
Apr
8
comment Is there additional security value in using passwords with words or phrases in non-English languages?
@Polynomial Technically, Passw0rd is only 8 characters! (Not "over 8")
Apr
1
answered Why improvising your own Hash function out of existing hash functions is so bad
Mar
28
comment What is zero day?
@Luc I wasn't trying to say that it had to have a patch when it was released, but rather that it could get released to the public some other way than though a patch. This method is usually a forum or a vulnerability website. exploit-db.com
Mar
28
comment What is zero day?
@Luc by definition a 0-day is not known by the public, hence when it is released to the public or patched it violates the definition therefore it is not a 0-day exploit anymore. One would just call it a vulnerability because it has been patch and is known. System administrators and security professionals can try to protect themselves by knowing this vulnerability. Good ol' wikipedia has a bunch of sources that reinterate this same idea: en.wikipedia.org/wiki/Zero-day_attack
Mar
28
answered What is zero day?
Mar
26
answered How can i calculate the number of possible passwords?