Reputation
461
Top tag
Next privilege 500 Rep.
Access review queues
Badges
4 13
Impact
~10k people reached

  • 0 posts edited
  • 4 helpful flags
  • 39 votes cast
Mar
6
awarded  Popular Question
Jan
27
comment Can posting “howsecureismypassword” results be a security risk?
@SteveDL good thing it never claims to be accurate.
Oct
10
comment Mitigate timing attack threat against password recovery page
"Even without the delay" the delay adds nothing in your example besides making the user experience worse. Why is it there in the first place?
Dec
31
revised PHP max_input_vars security expectations
added 49 characters in body
Dec
31
revised PHP max_input_vars security expectations
edited body
Dec
31
awarded  Yearling
Dec
31
answered PHP max_input_vars security expectations
Aug
19
awarded  Citizen Patrol
Aug
10
comment Javascript containing a long hexadecimal string and eval: is this suspicious?
Yes probably that site got "hacked"
Jul
22
awarded  Enlightened
Jul
12
revised Taking password letters not whole one, is this secure?
added 7 characters in body
Jul
11
revised Taking password letters not whole one, is this secure?
added 1 characters in body
Jul
11
revised Taking password letters not whole one, is this secure?
added 20 characters in body
Jul
11
awarded  Nice Answer
Jul
11
revised Taking password letters not whole one, is this secure?
added 205 characters in body
Jul
11
comment Taking password letters not whole one, is this secure?
Thanks for further clarification!
Jul
11
awarded  Commentator
Jul
11
comment Taking password letters not whole one, is this secure?
Well... as it was presented in the Q. The possible attacker would know the length of the password and the location of the characters to "guess" (if it is only a username before that). Thanks for the HSM link btw.
Jul
11
comment Taking password letters not whole one, is this secure?
Feel free to also comment on where I am wrong... @lynks
Jul
11
awarded  Organizer