meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 5 months |
| seen | Mar 21 at 11:52 | |
| stats | profile views | 8 |
|
Feb 25 |
answered | Why do we not trust an SSL certificate that expired recently? |
|
Feb 25 |
awarded | Critic |
|
Feb 2 |
answered | How can I explain SQL injection without technical jargon? |
|
Feb 2 |
answered | can I find on which machine was a zipped archive created? |
|
Jan 28 |
comment |
How to correctly implement AES in a backup application This is good advice. Also, it is important to use a secure mode of operation, i.e. not ECB. You then provide an IV for each file, not each block - it is an initialization vector. The IV for the next block is derived from the previous block (depending on the cipher mode). For turning a password into a key, you will probably want to use a PBKDF. You also may want to use that key to encrypt a master key, encrypt individual (e.g. file keys) with that master key, and store the encrypted individual keys. |
|
Jan 3 |
awarded | Teacher |
|
Jan 2 |
comment |
What is this authentication method/approach called? The entire approach is useless pseudo-security even if you require a weak token first. It is meant to allow users to detect phishing sites, and it cannot do that. The phishing site can always just relay the information it got, and relay back to the user the correct "knowledge". Sure, it requires a bit more effort from the phisher, but if you use indexed TANs or similar, they need to do this anyways. |
|
Jan 2 |
answered | What makes PINless Wi-Fi Direct using WPS on Android secure? |
|
Jan 2 |
answered | How can I embed iframe securely without restricting its functionality? |
|
Jan 2 |
awarded | Supporter |
|
Jan 2 |
comment |
GPU powered Password cracking machine - buy metal or cloud? @this.josh I think the cost of unavailability in a password cracker is pretty limited, and unavailability on Amazon is probably lower than on a self-constructed machine. |
|
Jan 2 |
answered | How should I safely display my phone number on my Website? |
