478 reputation
114
bio website camilstaps.nl
location Netherlands
age 18
visits member for 1 year, 9 months
seen 8 hours ago

I'm a student Computer Science & Cyber Security (Dutch page) at the Radboud University Nijmegen in the Netherlands. I'm also a freelance PHP (and more) developer running my own company, ViviSoft.


Stack Exchange Q&A site proposal: Gamification


profile for Camil Staps on Stack Exchange, a network of free, community-driven Q&A sites


Nov
19
comment Storing AES password for verification
Thank you, I removed my downvote ;)
Nov
18
comment Why protect files with sensative information with .htacces?
Thanks very much, didn't know about that. +1!
Nov
18
comment Why protect files with sensative information with .htacces?
If we're talking about a PHP file that makes a connection with a database (the passwords are there, but in PHP strings, and won't be outputted), and Apache is set up to process all PHP files before sending them to the client, what exactly would be a possible attack against which .htaccess would secure?
Nov
18
comment Storing AES password for verification
Your first paragraph on collision resistance is incorrect. Collision resistance is resistance against finding any two inputs with the same result. If you have a hash and want to compute an input with that hash (in the example of the testament), you're talking about pre-image resistance. See here: en.wikipedia.org/wiki/Cryptographic_hash_function#Properties
Nov
18
comment Can password_verify() be used to identify password after database breach?
@Mr.X no problem, happy to help!
Nov
18
comment Can password_verify() be used to identify password after database breach?
Please don't accept answers too fast. Other users may have something else to say, or may have a better explanation, and they may not look at your question because they see it has been answered already. You can wait a day or so, we're not in a hurry :)
Nov
18
answered Can password_verify() be used to identify password after database breach?
Oct
26
comment Is the option to jump to blanks in password fields a security risk?
This is a security risk for saving passwords, not for being able to jump to blanks.
Oct
17
accepted Could SSL-like encryption be used for not password-protected wireless access points?
Oct
15
comment Could SSL-like encryption be used for not password-protected wireless access points?
Yes, I would use a CA for that.
Oct
15
comment Could SSL-like encryption be used for not password-protected wireless access points?
No, I would actually suggest a scheme in which SSL would be used to add an extra encryption layer. Still, HTTP and HTTPS would be used according to the server, but then that connection is encrypted. However, now I see the problem: every wireless access point would need to get its own certificate from a CA, that would mean many many certificates.
Oct
15
comment Could SSL-like encryption be used for not password-protected wireless access points?
@raz from the wiki it looks like you're correct, and I'm mistaken in my assumption that this isn't possible yet. Thanks! (and maybe you could add it as an answer?)
Oct
15
asked Could SSL-like encryption be used for not password-protected wireless access points?
Oct
1
comment Does Outlook store plain-text passwords?
@PwdRsch thank you, if it's no problem for you :) I updated the answer.
Oct
1
revised Does Outlook store plain-text passwords?
added 322 characters in body
Oct
1
comment Does Outlook store plain-text passwords?
@PwdRsch you should make that into an answer, this is the real answer to the question.
Oct
1
comment Does Outlook store plain-text passwords?
@Ajedi32 yes, you're right, thank you. I added this to my answer (I hope you're okay with the quote like this?)
Oct
1
revised Does Outlook store plain-text passwords?
added 474 characters in body
Oct
1
revised Does Outlook store plain-text passwords?
added 655 characters in body
Oct
1
comment Does Outlook store plain-text passwords?
@Ajedi32 yes, in the train back home I was thinking of another possibility and when I got home I had forgotten it, but this was it. Thank you! Although I must say that this doesn't seem very likely to me, because if this was the case, why now tell the users?