130 reputation
3
bio website github.com/tangrs
location
age
visits member for 2 years, 2 months
seen 3 hours ago

4h
asked Should a 2FA recovery key be stored along with a password?
Nov
11
comment JavaScript Injection using Man in the Middle Attack
Download a copy of MITM Proxy and have a play around. Modifying traffic is done on-the-fly.
Oct
25
comment Protecting a document that you sell
Without this turning into an anti-DRM argument, the only real way of preventing piracy is to make buying the document or book more appealing than pirating it in my opinion. If you do decide to go with rolling your own DRM, keep in mind that you're probably going to end up doing 80% of the work preventing 20% of your readers from pirating.
Oct
25
comment Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk
There is no upper limit. If the password is chosen properly, you'll practically never find it (given no implementation or cryptographic flaws). Furthermore, I don't think I've read anything that suggests that any part of WPA2 is vulnerable to a birthday attack or even that the birthday attack is applicable here (it seems to be only used to find collisions in hashes and digital signatures).
Oct
11
comment My friend hashes passwords with SHA512 algorithm without salt. How do I convince him that he needs to add salt?
I wonder if Bozocrack would work well here...
Jul
11
comment Any example where client certification is required?
I believe startssl does this to authenticate its users
May
24
comment Why use Keepass, etc. if all your passwords are in one place?
LassPass does claim that your passwords are encrypted and decrypted locally and the key isn't ever sent to the server so it's probably on the same level as putting an encrypted keychain online.
Nov
24
awarded  Critic
Nov
24
awarded  Supporter
Sep
2
awarded  Teacher
Sep
1
answered Why don't computers check whether there are memory contents in some memory space?