Reputation
2,286
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
2 13 28
Newest
 Quorum
Impact
~145k people reached

Apr
5
comment Is knowing the salt a problem?
The storage issue can be overcome by using rainbow tables.
Apr
4
reviewed Edit How to deal with WPE users
Apr
4
revised How to deal with WPE users
added OP comment as part of the question
Apr
4
reviewed Approve Risks of using a webpage without SSL/TLS for donations
Apr
3
comment What is the most secure database?
related: security.stackexchange.com/questions/13304/…
Apr
3
reviewed Approve How does attacker Brute force facebook account if there is a limit for tries?
Apr
1
reviewed Approve Security Review - password_hash implementation for PHP
Mar
31
reviewed Approve A secret in a URL
Mar
25
comment How long will it take to break a salted password?
it might also be intersting to note that in the real world, attackers can test billions of passwords per second.
Mar
25
comment CSRF on login page
you could automatically refresh the login page once every x minutes using javascript.
Mar
24
comment Where to store a pepper?
The comment about 'a poorly developed PHP script' is a tunnel vision; the scripting language is not at fault: failure to properly configure your server leads to a non-secure server.
Mar
22
comment SQL injection: insert data from Get request
As far as I'm aware, you can not create a nested insert. You could however, manipulate the original INSERT statement.
Mar
20
revised SQL injection: insert data from Get request
added 79 characters in body
Mar
20
answered SQL injection: insert data from Get request
Mar
20
comment Should ability to access login page after authentication be considered a security flaw?
Do you mean that a login action (while being logged in) acts like an automated logout, followed by login as another user?
Mar
20
awarded  Organizer
Mar
20
revised Authorization on complex ownership
edited tags
Mar
19
awarded  Custodian
Mar
19
reviewed Approve Is this attack vector possible?
Mar
18
answered Authorization on complex ownership