Reputation
3,517
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 8 24
Impact
~297k people reached

Mar
23
comment What's the practical limit for rainbow-table based bruteforce?
Just to point something about salt : if the salt is totally hidden and secured, to anyone outside it'll be part of the password. Since a good salt is also random bytes, no one will be able to tell "there are N bytes of password, M bytes of salt". The complexity is only reduced when the attacker have the salt, not just it's lenght.
Mar
16
comment How to decrypt LDAP passwords Hashed as MD5?
@user1028: could you post one of the hashes you've got, just to verify if it's a valid md5 hash ?
Mar
9
answered Securing data on laptop's hdd
Mar
9
comment How secure is to store encryption keys or SSH Keys on LPAR?
@RoryAlsop : I agree with you, and I wouldn't trust to use anything without a proper configuration, training, consulting... well, that applies to almost everything about security. But it was a very small question, without that much context, and LPAR can be secure if properly used
Mar
9
revised How secure is to store encryption keys or SSH Keys on LPAR?
improved question
Mar
9
answered How secure is to store encryption keys or SSH Keys on LPAR?
Mar
9
suggested approved edit on How secure is to store encryption keys or SSH Keys on LPAR?
Mar
7
comment How to protect data on your hard disk if it is in an unfriendly environment?
And now just wait if the peer-review allows the edit, I made observations in your affirmations.
Mar
7
suggested rejected edit on How to protect data on your hard disk if it is in an unfriendly environment?
Mar
6
comment How to protect data on your hard disk if it is in an unfriendly environment?
I think you need to elaborate a bit more... or you'll end up thinking that you have a solution, just to discover someday that it wasn't really protecting you.
Mar
6
answered How to protect data on your hard disk if it is in an unfriendly environment?
Mar
5
answered Deciding whether user has left the site without logging out or has simply left the site open for notifications without actually doing any work?
Mar
5
awarded  Organizer
Mar
2
revised How long shall a certificate be valid?
added 655 characters in body
Mar
2
comment Should an admin user be able to edit passwords?
"Who Watches the Watchers" ?
Mar
2
answered How long shall a certificate be valid?
Feb
28
comment Using a weak password on a truecrypt volume
@drjimbob : I agree with you, if you know about security. For any person that who knows about security and how to deal with it, the more security you have, the better, and 0,5 is more than 0. I just got tired of finding people using a login password in the Windows and thinking that the computer was secure, just to show them that with a linux boot cd I could copy any file I wanted. User's fault? Maybe, but no message warns that it just provides a very weak protection. And, as I said, in general we deal with users, and users... are users.
Feb
27
answered Using a weak password on a truecrypt volume
Feb
27
revised How does the encryption of FPGA works?
added 2 characters in body
Feb
27
answered How does the encryption of FPGA works?