98 reputation
6
bio website
location
age
visits member for 1 year, 1 month
seen May 3 at 1:11

Dec
19
comment How can someone go off-web, and anonymise themselves after a life online?
I wrote a fraud tracking system based on that. It works amazingly. A returning fraudster is statistically detected with great accuracy (even if they change their ip, country, phone, address, etc and "borrow" a new online identity), because they always leave unique "signatures". The system cannot add new "dimensions" by itself but it would be an interesting topic to explore.
Oct
16
awarded  Benefactor
Oct
16
awarded  Scholar
Oct
16
accepted How can I be secure with a global salt?
Oct
9
revised How can I be secure with a global salt?
added 80 characters in body
Oct
9
comment How can I be secure with a global salt?
I think I am missing something because unsalted hashing (even with high number of rounds/cost) is unsecure (rainbow dictionaries), isn't it?
Oct
9
awarded  Promoter
Oct
8
revised How can I be secure with a global salt?
added 250 characters in body
Oct
7
revised How can I be secure with a global salt?
added 13 characters in body
Oct
7
revised How can I be secure with a global salt?
added 61 characters in body
Oct
7
comment How can I be secure with a global salt?
Good point! Unfortunately we cannot implement this solution because the risk assessment is done continuously and not only at the profile creation. :(
Oct
7
revised How can I be secure with a global salt?
deleted 12 characters in body
Oct
7
awarded  Student
Oct
7
comment How can I be secure with a global salt?
What we understood is that salt does not prevent the succes of an attack, but costs resulting in CPU needs does. That's why we increased the cost value to 10 and added more salt and md5 to prevent rainbow table usage. But a collision/birthday attack may be possible. We see abusers hourly. The issue is that the analysis is done by a statistical risk assessment application that we feed with raw data so we need to compare a "representation" of the password in a way or in an other. The tool recalculate the risk level of each user each time new raw data is added (So we can spot missed abuser).
Oct
7
revised How can I be secure with a global salt?
deleted 15 characters in body
Oct
7
revised How can I be secure with a global salt?
deleted 15 characters in body
Oct
7
asked How can I be secure with a global salt?
Oct
7
awarded  Supporter
Oct
5
awarded  Editor