494 reputation
411
bio website
location United Kingdom
age
visits member for 3 years, 5 months
seen Oct 2 at 7:28

Jul
2
awarded  Curious
Jun
25
awarded  Good Question
May
6
revised Signature-based antiviruses
deleted 1 character in body
May
6
answered Signature-based antiviruses
Mar
17
awarded  Popular Question
Nov
12
comment Is it useful to protect hashed password with encryption?
"weak passwords though can be retrieved more or less fast with a dictionary attack " this statement is incorrect. It is wrong because OP says "I am hashing the users' passwords with a random, long enough, salt". Given salt is used dictionary attack becomes useless for a database. See stackoverflow.com/q/3566504/706456 for details.
Aug
26
accepted How to detect social engineering attack?
Aug
23
awarded  Yearling
Aug
23
asked How to detect social engineering attack?
Aug
2
accepted Why would one increment card security code for a new payment card
Aug
1
asked Why would one increment card security code for a new payment card
May
29
awarded  Popular Question
May
17
awarded  Excavator
May
17
revised How does SSL/TLS work?
https://google.com is signed by GeoTrust (Equifax Secure Certificate Authority) and not by Thawte
May
17
suggested suggested edit on How does SSL/TLS work?
May
3
accepted Is access to the caller API in mobile phones a real security threat?
May
2
asked Is access to the caller API in mobile phones a real security threat?
Apr
29
answered How to Verify the Identity of the Caller of a Web Service
Apr
29
suggested suggested edit on dlp tag wiki
Mar
15
comment Where do I securely store application-specific symmetric key?
@lynks strictly speaking that is not true. For example DRM protected video. An application has a read access, but is not able to copy the media. Another example would be an ACL controlled folder with a centrally controlled environment where user usually has limited privileges.