meta user
network profile
| bio | website | evancarroll.com |
|---|---|---|
| location | Houston, TX | |
| age | 27 | |
| visits | member for | 10 months |
| seen | Mar 8 at 22:46 | |
| stats | profile views | 26 |
I AM AWESOME. Find me at my website
|
Jul 25 |
awarded | Commentator |
|
Jul 24 |
comment |
Can anyone provide references for implementing web application self password reset mechanisms properly? @polynomial "de-facto" standards have nothing to do with security. That's just an argument to maintain the status quo oblivious to the security implications. |
|
Jul 24 |
comment |
Can anyone provide references for implementing web application self password reset mechanisms properly? @curiousguy if plausible deniability is your goal, then yes. If security is your goal, then no. |
|
Jul 24 |
awarded | Teacher |
|
Jul 23 |
awarded | Editor |
|
Jul 23 |
awarded | Supporter |
|
Jul 23 |
comment |
Can anyone provide references for implementing web application self password reset mechanisms properly? Even if it is generated via SSL: you have no insurance that the e-mail itself is transferred over SSL and so this method has a huge flaw in transit -- the basic flaw of e-mail relay and retrieval. |
|
Jul 20 |
awarded | Autobiographer |
|
Jul 20 |
comment |
Citation Needed for FIPS Anecdote Regarding MD5 and RC4 Though, it wasn't really Antoine Joux: that's a misattribution in itself. It was Wang Xiaoyun. Papers 1 2 |
