meta user
network profile
| bio | website | traveljournal.net |
|---|---|---|
| location | Netherlands | |
| age | ||
| visits | member for | 2 years, 2 months |
| seen | Jan 31 at 11:06 | |
| stats | profile views | 106 |
The more I learn about security, the more I realise I don't know anything about the subject.
|
Aug 20 |
revised |
How to store salt? typo in my name |
|
Aug 20 |
suggested | suggested edit on How to store salt? |
|
Jul 30 |
awarded | Good Answer |
|
Jul 21 |
comment |
How to store salt? +1, Amen. I whish we where able to create an index/directory that points to the good answers to common/popular questions such this one. Even more so, because the common/popular questions regulary also attract quite insecure answers. |
|
Jul 21 |
comment |
How to store salt? Nice article! As far as I know, PBKDF2 is an Adaptive Key Derivation Function, but BCrypt and SCrypt are not; they are adaptive cost hashing algorithms. (The difference is subtle, but real). |
|
Jul 21 |
comment |
How to store salt? Your article is flawed. the salt generation is not sufficiently random. Other than that, this post looks a lot like it is meant to mostly promote your article, rather than answering the original question. |
|
Jul 21 |
comment |
How to store salt? -1 'a 256bit hash' does not buy you anything of weight here. The algorithm needt to be slow. Separating the hash and salt acros different boxes, creates a whole new range of issues, just stick with the best practice instead. |
|
Jul 20 |
awarded | Mortarboard |
|
Jul 20 |
awarded | Nice Answer |
|
Jul 20 |
answered | How to store salt? |
|
Jul 19 |
comment |
Best security algorith for storing passwords @Rook, could you write an answer to the linked question, right now there is no good answer on this view. |
|
Jul 19 |
comment |
Best security algorith for storing passwords @Rook, I was wondering what your take is on adding a 'pepper' value in addition to a salt for password hashing (independent of algorithm choice). Mainly because you approach the subject from the real-life point of view, rather than the academical side. |
|
Jul 17 |
comment |
PHP crypt() or phpass for storing passwords? -1 "(...) to it 'sha512' or something." password hashing is a lot more complicated than just saying 'no' to 1 hash function and loosely hinting that some other hashing algorithm could be better, without any further argumentation. PHPass is widely reviewed and found to be (one of) the best libraries available for PHP. |
|
Jul 17 |
answered | What program/language should I use when starting to write my own encryption software? |
|
Jul 17 |
awarded | Citizen Patrol |
|
Jul 16 |
comment |
How can I identify that my page is requested by robot, but not user's browser? of interest "Detecting 'stealth' web-crawlers": stackoverflow.com/questions/233192/… |
|
Jul 12 |
answered | PHP crypt() or phpass for storing passwords? |
|
Jul 11 |
accepted | Comparing the standard HTML form POST for user authentication vs Javascript/AJAX |
|
Jul 11 |
comment |
Comparing the standard HTML form POST for user authentication vs Javascript/AJAX @AndreyBotalov, the javascript method sends exactly the same fields as the vanilla HTML form. |
|
Jul 11 |
revised |
Comparing the standard HTML form POST for user authentication vs Javascript/AJAX added 271 characters in body |
