1,105 reputation
316
bio website brendanlong.com
location Colorado
age 24
visits member for 2 years, 1 month
seen May 13 at 19:56
stats profile views 57

Apr
28
revised Are there any uses of having a non-deterministic salt value for hashes?
Fix formatting of code
Apr
28
suggested suggested edit on Are there any uses of having a non-deterministic salt value for hashes?
Apr
7
awarded  Yearling
Apr
1
comment Why improvising your own Hash function out of existing hash functions is so bad
If your goal is just to protect against an attacker without access to your source code, then using a pepper (basically a hard-coded secret value that you hash along with the password) would be sufficient, and less error-prone than creating your own hash function.
Mar
27
comment Was WPS fixed (wifi)?
The Wikipedia article on WPS doesn't mention this. Can you link to a reliable source making this claim?
Mar
20
comment Setting up two way SSL
Are you trying to do client authentication with SSL or just connect to a web service over SSL? Why would firewalls make any difference?
Mar
14
awarded  Organizer
Mar
14
revised Implementing secure login for an API
edited tags
Mar
7
comment What are Security Practices for NoSql databases
Most like you should just read this: security.stackexchange.com/questions/7610/…
Mar
6
comment Use Authentication using 2 encrypted strings
@MatthewYang You might want to see the updated answer if you're still considering doing this. My main point remains the same though -- Using Redis is easier and more secure, and the speed difference doesn't matter.
Mar
6
comment Use Authentication using 2 encrypted strings
@StephenTouset Good point. I've updated my answer.
Mar
6
revised Use Authentication using 2 encrypted strings
added 299 characters in body
Mar
5
revised Use Authentication using 2 encrypted strings
added 177 characters in body
Mar
5
answered Use Authentication using 2 encrypted strings
Mar
5
revised Use Authentication using 2 encrypted strings
Add some puncuation and markdownify
Mar
5
suggested suggested edit on Use Authentication using 2 encrypted strings
Jan
17
awarded  Excavator
Jan
17
revised How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?
Correct title and minor grammatical changes.
Jan
17
suggested suggested edit on How far can we go in preventing videos from spreading out using P2P networks like BitTorrent?
Dec
20
comment How secure is aSSL (javascript)? Does it effectively mimic SSL?
@JeremyP hash that with JS -> JavaScript from the server you're trying to verify. The server is giving you the code you're using to verify it. This is like if security guards worked by asking you if you're allowed into the building. The good guys follow your complicated system to make sure they're allowed in. The bad guys just say "Yes, I'm allowed in."