3,229 reputation
1822
bio website blog.bstpierre.org
location United States
age 39
visits member for 3 years, 3 months
seen Aug 12 at 3:27

Hey


Oct
14
comment What is considered a reasonably high iteration count?
It also completely depends on what kind of target you are and how determined an attacker is going to be. Nobody's likely to bother with a 6-week attack to hack into a run-of-the-mill web app. But if the password provides access to corporate secrets or accounts worth $10M, then maybe it's worth 6 weeks worth of work... (not that you'd want to protect $10M worth of info with just a password).
Oct
13
awarded  Suffrage
Oct
13
answered Does it matter which Certificate Authority I source my SSL Certificate from?
Oct
13
awarded  Analytical
Oct
13
revised What kind of attacks against home router's NAT do exist?
reformat / blockquote
Oct
13
suggested suggested edit on What kind of attacks against home router's NAT do exist?
Oct
12
answered What kind of attacks against home router's NAT do exist?
Oct
12
answered How to simulate DDoS attacks from the Internet?
Oct
11
comment How do some sites (e.g. online banks) only ask for specific characters from a password without storing it as plaintext?
AviD makes a good point. I found a banking system that was obviously storing passwords as plaintext: when you go through the "reset password" routine, they mail your password back to you in plaintext via email!
Oct
8
awarded  Teacher
Oct
7
comment Getting self-signed SSL certificates for all https connections made from some premises
Or worse: the answer would be changed to say "It's completely trustworthy. Don't worry about it." ;)
Oct
7
answered I'm getting lots of unfamiliar connection attempts, what do I do?
Aug
23
awarded  Editor
Aug
23
revised Who is responsible for the strength of user's passwords?
spelling & grammar
Aug
23
suggested suggested edit on Who is responsible for the strength of user's passwords?
Jun
22
awarded  Autobiographer
Jun
22
awarded  Supporter