1,298 reputation
bio website
location Belgium
age 31
visits member for 4 years, 1 month
seen Jul 28 at 14:29

Functional analyst, working in Belgium. Happy to help, happy to learn.

29/04/2011: Yearling badge! I visited this site 353/365 days, but never 100 days in a row ;)

If I edited your post and didn't state why, feel free to ask. But it's probably these:

  • Fixed the title to better reflect the contents
  • Fixed spelling, punctuation and capitalisation
  • Removed "Hi, Thanks, Bye" and other non-contents fluffy filler.

comment If a web site shows me what my password was changed to, is it stored as plain text?
It might be wiser to differentiate between "stored in a way it can be retrieved" (be it plain text or reversible encryption) and "stored in an unretrievable way" (one way hashing).
comment How can I tell if I have the citadel virus without downloading an antivirus?
Actually pretty commendable of Virgin Media to send you an email and host a generic version on their website to prove its authenticity. Quite nice!
comment Trust Issues Relative to Open Source
The Tor Project has a very interesting blog post about Deterministic Builds that explains some of the troubles with this.
comment Is my developer's home-brew password security right or wrong, and why?
@Casey: offcourse, always invent your own. Make your own linked list, your own crypto, your own database, your own mergesort. Implement the algorithms and datastructures to understand them better. Then throw the implementation away - the existing are almost always better. If not, get on the project and improve them! Your peers will review your changes and give feedback. If you're wrong, you'll learn, if you're right, your changes benefit all humankind ;)
comment Irreversible hashing without collision
Hmm I'll investigate if there is some other data we can pull off the smart card. Would taking two hashes even further reduce the chance on collissions? Calculating both, Hash1(A) and Hash2(A), so that if Hash1(A) = Hash1(B), the chance for Hash2(A) <> Hash2(B) is big enough?
comment Irreversible hashing without collision
What would happen if I would actually use encoding? Encode using the public key, and throw the private key away. If I re-encode the same input later with the same key, does it give the same result? Could I use encoding as hashing?
comment At what point does something count as 'security through obscurity'?
The obscurity indeed refers to an procedure (algorithm), rather than a piece of shared knowledge (password). Often the reason why "security through obscurity" is considered bad, is because the opposite (public, known, tried, tested, proven algorithms) is considered good. People trying to implement an "obscure" algorithm will often invent their own, often overlooking certain things and creating huge vulnerabilities.
comment How do I know a piece of software only does what the author claims?
Or you can ask for the ingredients and cook it yourself (download source code & compile).
comment Are “man in the middle” attacks extremely rare?
Funny how the OP asks for cold, hard, real world data and you start with Well I guess...
comment Is denying login after incorrect attempts ineffective?
Plus, the actual account owner sees that someone was trying passwords on his account. If they'd just add a "list of last 1000 dates and IP-addresses that accessed your account", it would prevent a lot of "lurkers"...