User Surfer on the fall - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	9 months
	seen	Mar 31 at 23:25
stats	profile views	14

	122 reputation	bio	website		visits	member for	9 months
6 badges		location			seen	Mar 31 at 23:25

4

7

votes

4

answers

909

views

Challenging challenge: client-side password hashing and server-side password verification

nov 2 at 20:36 Scott Pack 7,981

8

19

votes

2

answers

3

kviews

Why is it possible to sniff an HTTPS / SSL request?

http ssl

sep 1 at 15:57

3

6

votes

5

answers

1

kviews

Why is php not used for banking sites or for a banking transaction?

web-application php

sep 23 at 8:01 tylerl 11.1k

4

13

votes

5

answers

1

kviews

The aescrypt implementation hashes a password 8192 times to generate the key. Is this necessary?

cryptography encryption passwords hash

sep 1 at 14:58 Tom Leek 24.9k

9

8

votes

6

answers

908

views

How do I get started with security? (beginner)

web-application

jun 1 '12 at 7:24 Rory Alsop♦ 32.4k

2

votes

8

answers

1

kviews

Pen Testing Practice Box?

penetration-test

mar 13 at 15:08 Aman Hardikar 1

6

5

votes

3

answers

860

views

Ethical Hacking - Penetration Testing Book(s)

penetration-test books

sep 1 at 9:43 Gurzo 583

27

43

votes

6

answers

3

kviews

Can anybody explain XSS to an idiot?

appsec web-application attacks owasp-top-ten xss

feb 13 at 1:49 TRiG 123

1

4

votes

3

answers

192

views

Secure File Encryption/Decryption Capabilities

encryption

aug 29 at 23:14 Eric G 3,016

85

114

votes

11

answers

14

kviews

How to securely hash passwords?

appsec cryptography passwords hash

apr 29 at 14:47 Valentin Rusk 1

1

2

votes

2

answers

146

views

From password to key

cryptography key-generation

aug 21 at 8:58 Polynomial 32.5k

2

5

votes

4

answers

689

views

Using password hash as session ID?

appsec cryptography hash session-management

aug 3 '11 at 7:09 D.W. 44.7k

3

15

votes

4

answers

2

kviews

How to hijack a session?

appsec web-application php session-management

mar 18 at 12:41 Kubica 1

1

0

votes

2

answers

871

views

Is it safe to store password in PHP session?

encryption passwords session-management

aug 22 at 9:54 SDC 176

21

34

votes

4

answers

11

kviews

Password Hashing add salt + pepper or is salt enough?

cryptography passwords hash salt hmac

dec 8 at 20:27 AviD♦ 20.3k

104

121

votes

7

answers

8

kviews

How to store salt?

passwords hash salt

oct 26 at 12:22 Polynomial 32.5k

152

168

votes

4

answers

41

kviews

Do any security experts recommend bcrypt for password storage?

cryptography passwords hash

jul 11 at 16:30 PBKDF2 61

1

2

votes

3

answers

398

views

What is the recomended algorithm to create a key from a password?

cryptography encryption passwords key-generation

feb 28 '12 at 21:30 D.W. 44.7k

29

28

votes

8

answers

4

kviews

Books about Penetration Testing

penetration-test professional-education books

apr 8 at 9:10 Ashish 33

2

3

votes

1

answer

167

views

When a company asks to test physical security, what are some techniques one could use to gain entry?

aug 16 at 7:33 Rory Alsop♦ 32.4k

2

5

votes

4

answers

8

kviews

Encryption - should I be using RSA or AES?

aes

jan 23 '12 at 18:12

1

vote

0

answers

304

views

A proposal for Data Transmission and Password Encryption

encryption php javascript databases

mar 9 '12 at 0:15 AviD♦ 20.3k

2

8

votes

5

answers

2

kviews

How can I decrypt data with Java, without hard-coding the key?

cryptography encryption windows java file-encryption

nov 23 at 7:51 AviD♦ 20.3k

7

10

votes

2

answers

462

views

Storing sensitive information securely

appsec encryption

jul 21 '11 at 6:19 D.W. 44.7k

2

3

votes

1

answer

2

kviews

How do I use C# to encrypt/decrypt data where the private key is on a smartcard, hardware security module, TPM chip etc

appsec cryptography key-management .net smartcard

jan 20 '11 at 0:50 AviD♦ 20.3k

4

20

votes

5

answers

2

kviews

PCI Encryption Key Management

cryptography key-management compliance pci-dss

dec 1 '11 at 15:04 Scott Pack 7,981

3

9

votes

5

answers

1

kviews

Storing private asymmetric key in application binary?

appsec encryption key-management binary-code

sep 29 '11 at 4:00 devadvocate 111

1

3

votes

4

answers

672

views

Asymmetric crypto: Decrypt own messages without having private key

cryptography key-management aes asymmetric

aug 16 at 16:56 David Cary 672

4

9

votes

2

answers

3

kviews

where to store a key for encryption

encryption key-management mysql

jan 29 at 1:20 Mike 108

Surfer on the fall

29 Favorites