111 reputation
3
bio website softkube.com/about/mario-awad
location Lebanon
age 29
visits member for 1 year, 9 months
seen 23 hours ago

Founder of SOFTKUBE, lead developer, and getting things done addict. Passionate about open source, user interface design, business development, and the tech world.


May
7
comment How does Google Authenticator work?
Thank you for the well defined answer and followup. Quick summary of section 7.4: Resynchronization of the Counter every now and then and a look-ahead window for the counter is what makes things work without requiring instant-sync.
May
7
comment How does Google Authenticator work?
In the case of HOTP, how does Google Authenticator know that I have "used" the password without syncing with the server? What Google Authenticator does is that it continues to flash different keys and I can just use any one them without giving feedback to my mobile.
Jan
3
comment How isolated are files on a VirtualBox virtual machine from the host filesystem?
Do all SSDs use the second option or does some of them not use encryption at all? and how can I tell before buying one?
Dec
22
comment Why don't people hash and salt usernames before storing them
It looks like we are both saying the same thing but using different terminology. When I say lookup I mean getting the username and displaying it when you mean just checking if it's properly provided or not. Cheers.
Dec
17
comment Why don't people hash and salt usernames before storing them
@LucasKauffman which part of my comment you think is wrong? Please elaborate, maybe we'll all learn something new here. Thanks.
Dec
17
comment Why don't people hash and salt usernames before storing them
You can't look up the username if it's hashed (that's by definition). You can only test if the provided username/password (both hashed, salted or not) are there in the database and are related to each other. The only thing you can look up is the display name.
Dec
10
comment What are some risks of purchasing a “used” domain name
Is there a way we can prevent this from happening?
Nov
27
comment How secure is aSSL (javascript)? Does it effectively mimic SSL?
Also, keep in mind that it looks like its outdated software (the "news" section dates back to 30-12-2009) so even if the logic/technique behind it is sound, you wouldn't want to use outdated code for your security needs.
Nov
19
comment Webmail host knows my password
And while at it do use a password manager like KeePass. Highly recommended when you have a lot of passwords as you'll be able to store distinct and decent passwords in it. Just make sure you don't forget the master KeePass password or loose the key files (recommended to have both set of course). Cheers.
Nov
6
awarded  Teacher
Nov
6
answered Cufon or Prototype as an attack vector for Blackhole exploit kit?
Oct
17
awarded  Autobiographer
Oct
17
awarded  Supporter