206 reputation
12
bio website kromey.us
location Fairbanks, AK
age 31
visits member for 3 years
seen 16 hours ago

Apr
13
awarded  Yearling
Jun
24
comment moving from MD5 to SHA-512
See, for example, the answer to this question: security.stackexchange.com/questions/4687/…
Jun
24
comment moving from MD5 to SHA-512
@Justin You could also just leave the "upgrade" code in place -- 3 years later (when my web app finally came down), the code to add salts to passwords that didn't have them was still there. There's actually a case to be made that more involved authentication procedures -- which take longer to complete -- improve security by naturally limiting the number of brute force attempts in a given period of time; this is why you'll see suggestions to hash passwords repeatedly instead of just once (although that's primarily to hinder off-line attacks if someone gets your database).
Jun
24
awarded  Teacher
Jun
24
comment PCI restrictions on using using (hashed) credit card number to identify a repeat customer?
PCI permits the storage and use of the first 5 digits (which identify the type of card) and last 4 digits of a credit card number. This is almost always enough to uniquely identify a transaction and, through that, the customer who made said transaction; it is not enough information, however, to use the card number. I know of at least one software product that does exactly this, however NDA prohibits me from saying what product or even what market said product is in.
Jun
24
answered moving from MD5 to SHA-512
May
19
comment homomorphic encryption and DARPA
Wow. Really? Wow! The more I learn about cryptography, the more it just blows me away!!
Apr
14
comment How to protect data on a thumb drive
Ah, okay. So, still too dangerous to have around my home, unless I'm just that eager for a new paperweight...
Apr
13
comment How to protect data on a thumb drive
That's an option? Everything I'd read about the Ironkey has suggested it was an always-on feature, which is what has kept me from getting one -- I have a wife, a sister, and a sister-in-law who all love trying over and over and over to crack my passwords, so an Ironkey wouldn't last long at all in my home!
Apr
13
awarded  Supporter