meta user
network profile
| bio | website | captainholly.wordpress.com |
|---|---|---|
| location | Minnesota | |
| age | 46 | |
| visits | member for | 7 months |
| seen | May 8 at 22:16 | |
| stats | profile views | 2 |
Seam and all that implies.
|
May 12 |
awarded | Teacher |
|
Mar 20 |
answered | Stop code injections into page code |
|
Mar 20 |
awarded | Scholar |
|
Mar 20 |
comment |
JInitiator is obsolete and I should reject it on grounds of security, right? 1) find obsolete products 2) create CVEs 3) profit |
|
Mar 20 |
accepted | JInitiator is obsolete and I should reject it on grounds of security, right? |
|
Mar 20 |
comment |
JInitiator is obsolete and I should reject it on grounds of security, right? and by "rolled out" you mean out the door, right? |
|
Mar 20 |
asked | JInitiator is obsolete and I should reject it on grounds of security, right? |
|
Oct 29 |
awarded | Supporter |
|
Oct 29 |
comment |
safe to use jBCrypt and recommend it to my organization? I understand what you are saying, but the login scheme just has to do one trip through the algo to verify the login. The attacker has to try millions and that is why the multiple iterations will inconvenience him more than it will my servlet. Beyond that, no web framework or web application is going to employ the specialized hashing that the attacker will presumably use. In other words, it isn't correct to single out Java as having Lead shoes. |
|
Oct 29 |
comment |
safe to use jBCrypt and recommend it to my organization? In the scenario where the attacker has captured the stored and hashed password, what difference could it possibly make what language was used to bcrypt the passwords in the first place? |
|
Oct 5 |
awarded | Student |
|
Oct 5 |
asked | safe to use jBCrypt and recommend it to my organization? |
|
Oct 5 |
awarded | Autobiographer |
