982 reputation
615
bio website paralint.com
location Montreal, Canada
age
visits member for 3 years, 7 months
seen yesterday

I like smart people who get things done. I do my best everyday to be one of them.

I code mostly in C++, Python, Java and... whatever comes my way. I also like to understand a problem down to its roots, a process also known as debugging.

LinkedIn and Careers profiles.


Aug
8
revised Locking an enterprise account from an internet facing application
Typos and better grammar
Aug
7
asked Locking an enterprise account from an internet facing application
Jun
20
comment Hashing Email Address and Contacting User
And a hypothetical collision waiting to happen would have to be for a user that has forgotten his password, ruling out the Birthday paradox IMO.
Jun
19
answered Is sending plain passwords over SSL as part of a password update process bad?
May
21
awarded  Citizen Patrol
May
21
comment Is 'Forge' Javascript crypto library secure?
How about this one from Stanford. Still off topic, though...
May
21
comment Is SESAME really used in Europe?
Thanks for the article link !
May
21
accepted Is SESAME really used in Europe?
Apr
28
asked Is SESAME really used in Europe?
Apr
15
awarded  Nice Answer
Mar
11
awarded  Good Answer
Jan
26
awarded  Yearling
May
31
comment Oracle Internet Directory (OID) hardening
OID requires anonymous search to be enabled if you want to register a database in it. Technotes ID 305371.1, 455031.1, 262560.1 and 456766.1 have more information. I gave up after weeks of hard work, looking at ldap traces and fidling with ACI ...
Feb
25
awarded  Popular Question
Feb
4
awarded  Custodian
Feb
4
reviewed Excellent Future proof encryption possible in theory?
Feb
4
reviewed Excellent Is it preferable to perform encryption using database functions or code?
Feb
4
reviewed Excellent Is it useful to determine the name of the server software while doing a penetration test?
Feb
4
comment Picking an encryption algorithm for auth tokens passed via AJAX
Should you decide to do cryptography in the browser, you might want to look at the Stanford Javascript Crypto Library.
Feb
4
comment Picking an encryption algorithm for auth tokens passed via AJAX
Beware : manipulating cookies with javascript will prevent you from using http only cookies, which increases the risk associated with cross-site scripting (XSS). Complexity is the ennemy of security.