Reputation
1,164
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 11 18
Newest
 Yearling
Impact
~38k people reached

Feb
28
awarded  Yearling
Feb
6
comment Sharing passwords through email can be considered insecure?
plaintextoffenders.com/about says "sending the password via email ... is bad." That seems to directly contradict "For most webs and services it is ok to send you a clear password ... to your e-mail." Did you maybe intend to put a "not" somewhere in that sentence?
Feb
6
comment Sharing passwords through email can be considered insecure?
Have you heard of plaintextoffenders.com/about ?
Feb
3
comment Does server RAM count as storage for PCI Compliance?
+1 agree. Maybe it would be better if the credit card data went directly from the customer to a PCI-compliant server directly to the payment processor (as with Stripe, Square, Chargify, etc.), rather than making a detour through some other server.
Jan
24
comment Where is the salt on the OpenSSL AES encryption?
related: "Is there a standard for OpenSSL-interoperable AES encryption?"
Jan
13
comment Increase the security of an already stored password hash
related: Convert old and busted password encryption to something sensible
Nov
23
awarded  Notable Question
Aug
30
awarded  Popular Question
Aug
5
comment Is using a public-key for logging in to SSH any better than saving a password?
If "not using a passphrase isn't smart", then why does the OpenSSL documentation specifically say that "it may be a good thing to avoid protecting it with a password" ? (Should I ask this as an independent question?)
Jun
18
revised public key distribution from a central server
edited tags
Jun
18
awarded  Nice Question
May
13
answered Computing entropy for a passphrase ( minimal word length … )
May
13
comment How safe is the 256-bit encryption used in bank transactions?
@GuySirton: While many people would be surprised if it turns out that factoring is NP-hard, is there any proof that factoring is definitely not NP-hard?
May
13
awarded  Organizer
May
13
revised How can I block an IP, if I'm getting many http requests in a second?
capitalize "IP", etc.
May
13
suggested approved edit on How can I block an IP, if I'm getting many http requests in a second?
Mar
20
awarded  Notable Question
Mar
16
awarded  Good Question
Mar
16
awarded  Popular Question
Mar
15
awarded  Nice Question