Reputation
1,953
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
2 11 24
Impact
~130k people reached

Jun
19
awarded  Scholar
Jun
19
accepted Password Hashing add salt + pepper or is salt enough?
Jun
14
comment HMAC - Why not HMAC for password storage?
Related (but not the same): Password Hashing add salt + pepper or is salt enough?
Jun
14
revised Password Hashing add salt + pepper or is salt enough?
added 454 characters in body
Jun
14
comment how long does it take to actually generate rainbow tables?
"no one uses single-run MD5 on passwords" if than only was true.
May
31
comment Is it illegal to read an e-mail that was accidentally sent to you?
The same is true in the Netherlands, they are not legally binding, but not having them can hinder a case is some situations.
May
26
answered How can a system enforce a minimum number of changed characters in passwords, without storing or processing old passwords in cleartext?
May
19
comment What are effective ways to prevent targeted phishing?
I'm not sure one can protect against users on auto-pilot.
May
19
comment How to defend vs. Image Remote File Inclusion, e.g. RFI using a .gif file (Apache/PHP)?
@Jürgen Thelen, I have the strong feeling you are not talking about PHP's include() at all. But rather are talking about hosting images. Also, when you would use include(), moving the files to another domain will not protect you.
May
18
answered How to defend vs. Image Remote File Inclusion, e.g. RFI using a .gif file (Apache/PHP)?
May
14
awarded  Commentator
May
14
awarded  Nice Question
May
14
awarded  Critic
May
14
revised Password Hashing add salt + pepper or is salt enough?
edited tags
May
12
awarded  Teacher
Apr
26
revised Surfing anynomously
added 1 characters in body
Apr
26
answered Surfing anynomously
Apr
26
suggested rejected edit on Possibility of undetectable encryption system
Apr
23
comment Password Hashing add salt + pepper or is salt enough?
Hmm, the edit removed the much of the uncertainty present in the answer as written by @Jesper Mortensen. Maybe the edit should be rolled back and moved to a separate answer?
Apr
23
revised Password Hashing add salt + pepper or is salt enough?
Removed the "PBKDF2". see also: http://security.stackexchange.com/questions/2051/is-pbkdf2-based-system-cryptology-rfc2898derivebytes-better-for-unicode-passw/2056#2056; deleted 1 characters in body