30,874 reputation
23278
bio website
location Troy, NY
age 30
visits member for 2 years, 3 months
seen 2 hours ago

Dec
4
reviewed Close Automated tools to manage or monitor authorized_keys?
Dec
3
reviewed Close Why hydra doesn't return a valid username&password with a valid supplied username&password
Dec
3
reviewed Close Is there a Plug and Play demonstration kit for various types of attacks?
Dec
2
reviewed Leave Open Encrypt files on FTP server
Dec
2
reviewed Leave Open Do I have to hash users' IP addresses when I log them?
Dec
2
comment Do I have to hash users' IP addresses when I log them?
I would also add that storing the IPs in a "non-reversible" manner is counter productive as it prevents you from being able to track security threats against your site. If you don't have an accessible IP address in the log file, then you can't report relevant information in the case of an attack on your systems.
Dec
1
answered MITM faking certificates
Nov
26
comment Are photographs of fingerprints a security risk?
@Josef - that's an interesting area of research, but it is still making some approximation guesses which could potentially throw off getting an accurate finger print reading. It would also have perspective issues to correct for and shaping issues in order to get a consistent finger print out of the video. It might be possible at some point in the future, but I'm still not particularly convinced that the state of the art could extract a usable print, at least for finger print systems with a low false positive rate. Other methods are certainly far easier to obtain prints.
Nov
25
answered Are photographs of fingerprints a security risk?
Nov
25
reviewed Close Weird characters from contact page
Nov
24
reviewed Close TLS Authentication/OpenVPN/MITM Attacks on Public Wifi
Nov
24
reviewed Close How to identify which storage USB device is BadUSB-free at store?
Nov
24
reviewed Close Using salt or secret for Hmac
Nov
24
reviewed Close Limit VirtualBox guests to one network interface
Nov
24
reviewed Close Capture a packet at the MAC layer
Nov
24
reviewed Close How do I view a list of known unpatched windows xp arbitrary code execution vulnerabilities?
Nov
24
comment Can a botnet be used to effectively break encryption keys?
@k1DBLITZ - when the times to crack are several orders of magnitude past the heat death of the universe, it doesn't practically matter. Every additional bit DOUBLES the time to crack, assuming there aren't flaws in the algorithm.
Nov
24
comment Are 2FA soft-tokens flawed if the user can log into the website from the same mobile device?
@nowen - fair enough.
Nov
21
answered Encrypted retrievable password
Nov
21
comment Encrypted retrievable password
@MatthewPeters - fair enough, happens to us all.