3,081 reputation
620
bio website
location Curitiba, Brazil
age 35
visits member for 3 years, 5 months
seen 2 days ago

Computer analyst


Nov
12
reviewed Approve suggested edit on Is it useful to protect hashed password with encryption?
Oct
24
comment Are the SS64.com password generators a good approach?
Those passwords will fail on those sites that require at least one symbol. The Base64 will only represent a-z, A-Z and numbers, since the + and / will be replaced by E and a.
Oct
18
awarded  Custodian
Oct
10
answered Does any PXE/Full disk encryption password concept like this exist?
Sep
20
comment Biometric non revocable major flaw
Yes, some body parts can be glued back... hands, face and even... hum... Bobbit
Sep
11
comment How can you I detect low frequency brute forcing over multiple connections?
sorry, what I meant was against only one login, or against many different logins (even ones that don't exist)? But I already answered, I think
Sep
11
answered How can you I detect low frequency brute forcing over multiple connections?
Sep
11
comment How can you I detect low frequency brute forcing over multiple connections?
You mean lots of attempts to one specific login, or to combinations of login/password?
Aug
29
comment Why is password hashing considered so important?
Thanks for your demo!!!!
Aug
26
comment How can I prove that I wrote a certain blog post?
It's possible to study the author writing style and verify, with a certain level of confidence, that the writing style of one author is the same that is found in some published article...
Aug
20
answered Can hardware firewalls be infected?
Aug
19
answered Who tells that TrueCrypt is secure?
Aug
16
awarded  Peer Pressure
Aug
9
comment Obtaining e-mail address at registration
ops, I'll comment on stackoverflow then...
Aug
9
comment Obtaining e-mail address at registration
You must save the username/ password, the email, and the unique link (one link to each username/email)...
Aug
8
comment Are there any guidelines for passwords that need to be read out loud?
Strong password, easy to tell on the phone? "CorrectHorseBatteryStaple" isn`t mandatory here?
Aug
8
awarded  Popular Question
Jul
18
comment Is it acceptable that a skilled professional pentester deletes or modifies sensitive data in production unintentionally during a pentest?
@MarkHenderson I'd love to see a site with details of that case... :)
Jul
12
comment How exactly is MD5 vulnerable to collission attacks?
@caesarsgrunt yep: if youre sure youll provide the file and the hash, its less likely that someone will come with a second file thatll have the same hash. But, given that other hash functions exist, and arent broken yet, its advised to move to another one, when possible... :)
Jul
12
comment How exactly is MD5 vulnerable to collission attacks?
@caesarsgrunt : take a look at en.wikipedia.org/wiki/Cryptographic_hash_function#Properties . What you ask is the second pre-image attack. This answer was about the collision resistance...