User Surfer on the fall - IT Security Stack Exchange

bio	website
	location
	age
visits	member for	9 months
	seen	Mar 31 at 23:25
stats	profile views	14

	122 reputation	bio	website		visits	member for	9 months
7 badges		location			seen	Mar 31 at 23:25

152

168

votes

4

answers

42

kviews

Do any security experts recommend bcrypt for password storage?

jul 11 at 16:30 PBKDF2 61

105

123

votes

7

answers

8

kviews

How to store salt?

passwords hash salt

oct 26 at 12:22 Polynomial 32.8k

86

115

votes

11

answers

14

kviews

How to securely hash passwords?

appsec cryptography passwords hash

apr 29 at 14:47 Valentin Rusk 1

27

43

votes

6

answers

3

kviews

Can anybody explain XSS to an idiot?

appsec web-application attacks owasp-top-ten xss

feb 13 at 1:49 TRiG 123

21

35

votes

4

answers

11

kviews

Password Hashing add salt + pepper or is salt enough?

cryptography passwords hash salt hmac

dec 8 at 20:27 AviD♦ 20.4k

29

28

votes

8

answers

4

kviews

Books about Penetration Testing

penetration-test professional-education books

apr 8 at 9:10 Ashish 33

4

20

votes

5

answers

2

kviews

PCI Encryption Key Management

cryptography key-management compliance pci-dss

dec 1 '11 at 15:04 Scott Pack 7,986

9

20

votes

2

answers

3

kviews

Why is it possible to sniff an HTTPS / SSL request?

http ssl

sep 1 at 15:57

3

15

votes

4

answers

3

kviews

How to hijack a session?

appsec web-application php session-management

mar 18 at 12:41 Kubica 1

5

13

votes

5

answers

1

kviews

The aescrypt implementation hashes a password 8192 times to generate the key. Is this necessary?

cryptography encryption passwords hash

sep 1 at 14:58 Tom Leek 25k

7

10

votes

2

answers

471

views

Storing sensitive information securely

appsec encryption

jul 21 '11 at 6:19 D.W. 44.9k

4

9

votes

2

answers

3

kviews

where to store a key for encryption

encryption key-management mysql

jan 29 at 1:20 Mike 108

3

9

votes

5

answers

1

kviews

Storing private asymmetric key in application binary?

appsec encryption key-management binary-code

sep 29 '11 at 4:00 devadvocate 111

9

8

votes

6

answers

916

views

How do I get started with security? (beginner)

web-application

jun 1 '12 at 7:24 Rory Alsop♦ 32.6k

3

8

votes

5

answers

1

kviews

Why is php not used for banking sites or for a banking transaction?

web-application php

sep 23 at 8:01 tylerl 11.1k

3

8

votes

5

answers

2

kviews

How can I decrypt data with Java, without hard-coding the key?

cryptography encryption windows java file-encryption

nov 23 at 7:51 AviD♦ 20.4k

4

7

votes

4

answers

920

views

Challenging challenge: client-side password hashing and server-side password verification

web-application javascript bcrypt pbkdf2

nov 2 at 20:36 Scott Pack 7,986

6

5

votes

3

answers

887

views

Ethical Hacking - Penetration Testing Book(s)

penetration-test books

sep 1 at 9:43 Gurzo 593

2

5

votes

4

answers

8

kviews

Encryption - should I be using RSA or AES?

aes

jan 23 '12 at 18:12

2

5

votes

4

answers

691

views

Using password hash as session ID?

appsec cryptography hash session-management

aug 3 '11 at 7:09 D.W. 44.9k

1

4

votes

3

answers

193

views

Secure File Encryption/Decryption Capabilities

encryption

aug 29 at 23:14 Eric G 3,031

2

3

votes

1

answer

168

views

When a company asks to test physical security, what are some techniques one could use to gain entry?

aug 16 at 7:33 Rory Alsop♦ 32.6k

1

3

votes

4

answers

672

views

Asymmetric crypto: Decrypt own messages without having private key

cryptography key-management aes asymmetric

aug 16 at 16:56 David Cary 672

2

3

votes

1

answer

2

kviews

How do I use C# to encrypt/decrypt data where the private key is on a smartcard, hardware security module, TPM chip etc

appsec cryptography key-management .net smartcard

jan 20 '11 at 0:50 AviD♦ 20.4k

1

2

votes

2

answers

152

views

From password to key

cryptography key-generation

aug 21 at 8:58 Polynomial 32.8k

1

2

votes

3

answers

400

views

What is the recomended algorithm to create a key from a password?

cryptography encryption passwords key-generation

feb 28 '12 at 21:30 D.W. 44.9k

2

votes

8

answers

1

kviews

Pen Testing Practice Box?

penetration-test

mar 13 at 15:08 Aman Hardikar 1

1

vote

0

answers

304

views

A proposal for Data Transmission and Password Encryption

encryption php javascript databases

mar 9 '12 at 0:15 AviD♦ 20.4k

1

0

votes

2

answers

903

views

Is it safe to store password in PHP session?

encryption passwords session-management

aug 22 at 9:54 SDC 176

Surfer on the fall

29 Favorites