network profile
|
Apr 13 |
awarded | Yearling |
|
Jun 24 |
comment |
moving from MD5 to SHA-512 See, for example, the answer to this question: security.stackexchange.com/questions/4687/… |
|
Jun 24 |
comment |
moving from MD5 to SHA-512 @Justin You could also just leave the "upgrade" code in place -- 3 years later (when my web app finally came down), the code to add salts to passwords that didn't have them was still there. There's actually a case to be made that more involved authentication procedures -- which take longer to complete -- improve security by naturally limiting the number of brute force attempts in a given period of time; this is why you'll see suggestions to hash passwords repeatedly instead of just once (although that's primarily to hinder off-line attacks if someone gets your database). |
|
Jun 24 |
awarded | Teacher |
|
Jun 24 |
comment |
PCI restrictions on using using (hashed) credit card number to identify a repeat customer? PCI permits the storage and use of the first 5 digits (which identify the type of card) and last 4 digits of a credit card number. This is almost always enough to uniquely identify a transaction and, through that, the customer who made said transaction; it is not enough information, however, to use the card number. I know of at least one software product that does exactly this, however NDA prohibits me from saying what product or even what market said product is in. |
|
Jun 24 |
answered | moving from MD5 to SHA-512 |
|
May 19 |
comment |
homomorphic encryption and DARPA Wow. Really? Wow! The more I learn about cryptography, the more it just blows me away!! |
|
Apr 14 |
comment |
How to protect data on a thumb drive Ah, okay. So, still too dangerous to have around my home, unless I'm just that eager for a new paperweight... |
|
Apr 13 |
comment |
How to protect data on a thumb drive That's an option? Everything I'd read about the Ironkey has suggested it was an always-on feature, which is what has kept me from getting one -- I have a wife, a sister, and a sister-in-law who all love trying over and over and over to crack my passwords, so an Ironkey wouldn't last long at all in my home! |
|
Apr 13 |
awarded | Supporter |
