1,668 reputation
1922
bio website traveljournal.net
location Netherlands
age
visits member for 3 years, 8 months
seen Jan 31 '13 at 11:06

The more I learn about security, the more I realise I don't know anything about the subject.


Nov
2
answered Is there a better way to take advantage of current 'approved', 'proven', and memory/cpu-expensive algorithms while using salts and peppers?
Oct
15
asked Base64 encode diffences in BCrypt implemenations
Oct
8
answered How does one properly assess risk?
Oct
1
answered Implementing SRP Challenge login system *with SSL* (Using PHP)
Oct
1
answered Is it secure to use bcrypt-generated salt in cookie to serve as token in place of a password?
Sep
26
answered How to invalidate a session on browser closure?
Aug
21
answered Security Review - password_hash implementation for PHP
Jul
20
answered How to store salt?
Jul
12
answered PHP crypt() or phpass for storing passwords?
Jul
10
asked Comparing the standard HTML form POST for user authentication vs Javascript/AJAX
Jun
28
answered How to defend against invalid UTF7/8 that hides a <script> tag?
May
14
answered Can the salt for PBKDF2 be a hash of the user-entered password?
Feb
29
asked Mobile OTP - Secure?
Jan
16
asked Role Based Access Control + Data Ownership based permissions
Dec
5
answered Is it safe to store the password hash in a cookie and use it for “remember-me” login?
May
26
answered How can a system enforce a minimum number of changed characters in passwords, without storing or processing old passwords in cleartext?
May
18
answered How to defend vs. Image Remote File Inclusion, e.g. RFI using a .gif file (Apache/PHP)?
Apr
26
answered Surfing anynomously
Apr
22
asked Password Hashing add salt + pepper or is salt enough?