3,091 reputation
620
bio website
location Curitiba, Brazil
age 35
visits member for 3 years, 5 months
seen Dec 18 at 13:00

Computer analyst


Jul
2
comment Is this a secure way of storing passwords?
@Cthulhu the way the OP proposes it, concatenating random characters (if really random, will include non-printable characters too) avoid the problems that the article tries to explain.
Jul
2
comment Is this a secure way of storing passwords?
@Cthulhu so the answer should have stated that. The way it is, it's wrong. Hashing many times is good if you add the salt (and the pepper, why not). The article is based on a wrong assumption: the 14-printable characters have LESS entropy than the 20 hex-characters hash.
Jul
1
comment Password protect an excel file for a period of time?
@MOTS If the file is really important, that would attract attention from people who really want it, consider it impossible. If you want to protect against a 5 year old boy who wants it, perhaps you can... :) It really depends on the resources of your enemy.
Jul
1
comment Password protect an excel file for a period of time?
it would be much harder than that. If someone is able to see a file, he is also able to take a photo or film it.
Jul
1
answered Password protect an excel file for a period of time?
Jun
30
accepted How to properly anonymize data, if hashing isn't enough?
Jun
28
awarded  Yearling
Jun
26
comment How to properly anonymize data, if hashing isn't enough?
@D.W. your edit was perfect.
Jun
25
asked How to properly anonymize data, if hashing isn't enough?
May
15
reviewed Approve Leading injection
May
15
reviewed Approve Is sqlmap traceable?
May
6
comment Password protected zip opened in notepad
When did you create that .zip file? Did you use strong password or it was a time when you knew little and just used lowercase letters? If so, try bruteforcing it with some program like FZC. In modern computers, weak passwords are easily cracked.
Apr
30
reviewed Approve Is the HTTP TRACE method a security vulnerability?
Apr
28
reviewed Approve Can I determine a private key given the encrypted data and corresponding cleartext?
Apr
24
comment What makes it illegal to use the information learned by exploiting a bug?
@myq depends on where you live.
Apr
15
comment I need two separate hidden volumes in disk encryption. What are my options?
@superuser :) take care when doing things "for fun" in security realms. You might end up without your data or without security...
Apr
8
answered Fixing security issues without boss/client's authorisation
Apr
2
revised Why do banking websites always log you out after inactivity?
deleted 34 characters in body
Apr
1
comment Is it possible to completely wipe a flash memory?
You can take a look at this procedures (draft): csrc.nist.gov/publications/drafts/800-88-rev1/…
Mar
20
reviewed Approve What needs to be focused on when hardening a LAMP stack?