172 reputation
4
bio website
location
age
visits member for 1 year, 3 months
seen 12 hours ago

Apr
9
answered How easy is it really to do IP spoofing?
Feb
23
comment Is using SHA-512 for storing passwords tolerable?
I sympathise with @SnakeDoc. Sure, there is a legitimate trade-off between cost and security, but there's also a moral (and possibly legal) obligation to protect your clients' data. I wouldn't want to do business with a company that chooses to store my password in plain text because a breach is only going to cost $100. The question asks for something far less extreme; I don't know whether SHA-512 would qualify as intolerable bad practice, but I wouldn't be too quick to recommend it either.
Aug
30
comment Is the Web browser status bar always trustable?
@bobince: Can you provide an example?
Jun
21
comment Hosting an “IP Rental” address. Is this common, safe?
By all means, advise caution, but this answer is overstating the risks sufficiently to make it almost completely wrong, if I may say so.
Apr
3
awarded  Critic
Apr
2
comment Password and Generated number - How does it work?
I read it as referencing highly authoritative sources. +1 for that.
Apr
1
answered Why improvising your own Hash function out of existing hash functions is so bad
Mar
8
awarded  Custodian
Mar
8
reviewed No Action Needed Are password complexity rules counterproductive?
Feb
6
awarded  Supporter
Jan
19
comment How to remain 100% anonymous on the internet?
@JohnU is right. Sensitive information is not obtained from IPs, but from databases containing private data. In itself, an IP address is just a number that indicates nothing worth worrying about.
Jan
17
answered Why Say IP Addresses Are Harmless?
Jan
17
awarded  Teacher
Jan
17
comment How to remain 100% anonymous on the internet?
Purely in the interest of staying anonymous, I'd say TOR is actually fairly close to perfect for this. Most of the weaknesses boil down to the user voluntarily but unintentionally revealing his identity, but then again, no security software can withstand a determined end user.
Jan
17
answered Is it possible to decode xor encoded string from N copys?