User Surfer on the fall - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	10 months
	seen	Jun 7 at 22:32
stats	profile views	14

	127 reputation	bio	website		visits	member for	10 months
8 badges		location			seen	Jun 7 at 22:32

3

7

votes

5

answers

1

kviews

Why is php not used for banking sites or for a banking transaction?

web-application php

sep 23 at 8:01 tylerl 11.8k

9

20

votes

2

answers

3

kviews

Why is it possible to sniff an HTTPS / SSL request?

http ssl

sep 1 at 15:57

1

4

votes

3

answers

196

views

Secure File Encryption/Decryption Capabilities

encryption

aug 29 at 23:14 Eric G 3,096

1

0

votes

2

answers

1

kviews

Is it safe to store password in PHP session?

encryption passwords session-management

aug 22 at 9:54 SDC 176

1

2

votes

2

answers

160

views

From password to key

cryptography key-generation

aug 21 at 8:58 Polynomial 34.1k

2

3

votes

1

answer

177

views

When a company asks to test physical security, what are some techniques one could use to gain entry?

aug 16 at 7:33 Rory Alsop♦ 33.3k

1

3

votes

4

answers

686

views

Asymmetric crypto: Decrypt own messages without having private key

cryptography key-management aes asymmetric

aug 16 at 16:56 David Cary 687

6

5

votes

3

answers

993

views

Ethical Hacking - Penetration Testing Book(s)

penetration-test books

sep 1 at 9:43 Gurzo 603

110

125

votes

7

answers

9

kviews

How to store salt?

passwords hash salt

oct 26 at 12:22 Polynomial 34.1k

4

7

votes

4

answers

991

views

Challenging challenge: client-side password hashing and server-side password verification

web-application javascript bcrypt pbkdf2

nov 2 at 20:36 Scott Pack 8,121

2

votes

8

answers

1

kviews

Pen Testing Practice Box?

penetration-test

mar 13 at 15:08 Aman Hardikar 1

10

8

votes

6

answers

967

views

How do I get started with security? (beginner) [closed]

web-application

jun 1 '12 at 7:24 Rory Alsop♦ 33.3k

1

vote

0

answers

313

views

A proposal for Data Transmission and Password Encryption [closed]

encryption php javascript databases

mar 9 '12 at 0:15 AviD♦ 21.1k

4

10

votes

2

answers

3

kviews

where to store a key for encryption

encryption key-management mysql

jan 29 at 1:20 Mike 108

1

2

votes

3

answers

412

views

What is the recomended algorithm to create a key from a password?

cryptography encryption passwords key-generation

feb 28 '12 at 21:30 D.W. 45.7k

2

5

votes

4

answers

8

kviews

Encryption - should I be using RSA or AES?

aes

jan 23 '12 at 18:12

3

8

votes

5

answers

2

kviews

How can I decrypt data with Java, without hard-coding the key?

cryptography encryption windows java file-encryption

nov 23 at 7:51 AviD♦ 21.1k

7

10

votes

2

answers

498

views

Storing sensitive information securely

appsec encryption

jul 21 '11 at 6:19 D.W. 45.7k

2

5

votes

4

answers

712

views

Using password hash as session ID?

appsec cryptography hash session-management

aug 3 '11 at 7:09 D.W. 45.7k

22

37

votes

4

answers

12

kviews

Password Hashing add salt + pepper or is salt enough?

cryptography passwords hash salt hmac

dec 8 at 20:27 AviD♦ 21.1k

3

15

votes

4

answers

3

kviews

How to hijack a session?

appsec web-application php session-management

mar 18 at 12:41 Kubica 1

29

28

votes

8

answers

4

kviews

Books about Penetration Testing

penetration-test professional-education books

apr 8 at 9:10 Ashish 33

2

3

votes

1

answer

2

kviews

How do I use C# to encrypt/decrypt data where the private key is on a smartcard, hardware security module, TPM chip etc

appsec cryptography key-management .net smartcard

jan 20 '11 at 0:50 AviD♦ 21.1k

3

10

votes

5

answers

1

kviews

Storing private asymmetric key in application binary?

appsec encryption key-management binary-code

sep 29 '11 at 4:00 devadvocate 111

5

20

votes

5

answers

2

kviews

PCI Encryption Key Management

cryptography key-management compliance pci-dss

dec 1 '11 at 15:04 Scott Pack 8,121

27

43

votes

6

answers

4

kviews

Can anybody explain XSS to an idiot?

appsec web-application attacks owasp-top-ten xss

feb 13 at 1:49 TRiG 123

5

14

votes

5

answers

1

kviews

The aescrypt implementation hashes a password 8192 times to generate the key. Is this necessary?

cryptography encryption passwords hash

sep 1 at 14:58 Tom Leek 25.5k

95

123

votes

11

answers

15

kviews

How to securely hash passwords?

appsec cryptography passwords hash

jun 5 at 6:51 PCMcGee 1

155

177

votes

4

answers

44

kviews

Do any security experts recommend bcrypt for password storage?

cryptography passwords hash

jun 11 at 13:34 Søren Løvborg 103

Surfer on the fall

29 Favorites