3,135 reputation
832
bio website
location
age
visits member for 3 years, 9 months
seen 2 hours ago

1d
reviewed Close How to configure μTorrent for a VPN?
Mar
26
reviewed Approve Should I be concerned if my website throws stack information?
Mar
23
reviewed Close Utimaco CryptoServer Simulator
Mar
23
reviewed Close JWT Signature Validation
Mar
23
comment JWT Signature Validation
Is HMAC vulnerable to extension attack? If thats so, this algorithm could be as well
Mar
23
reviewed Close injection of a malicious php file to the webroot folder
Mar
20
reviewed Close Repercussions for poor password practices?
Mar
20
reviewed Leave Open How good is confidentiality with physical mail forwarding companies?
Mar
19
reviewed No Action Needed Sans security courses: How are self study courses certified?
Mar
10
reviewed Looks OK What is a current best practice example of basic encryption and decryption in PHP?
Mar
9
reviewed Close Why encrypt client<->server on top of TLS?
Mar
8
reviewed Close VMWare Virtual Machines: can be accessed from Internet?
Mar
6
comment At what length does a password stop making sense?
While unfeasible, I have a comment on what limit a password can have before it stops making sense. It depends on how the password is stored (hashed). If the password is stored "securely" using sha-2, which have 256 bit of entropy, and the password contain more than 256 bits of entropy, it is a certainty that there will exist collisions where password A and B both leads to hash C. This is due to the pigeon hole principle. If the password contain all printable letters (100), it will not make sense of having a longer password than 39 characters due to this "problem".
Mar
5
reviewed Close Is plain text over https really a good idea?
Mar
2
reviewed Close Did anyone encounter a problem with ssl certificate from network solutions on mobile device?
Mar
2
reviewed Close Is it good practice to let Node/Go/… act as a frontend webserver?
Feb
25
reviewed No Action Needed When signing email with GPG, how does verification by the receiver work?
Feb
25
reviewed Leave Open Linux/ssh - Forensic question
Feb
25
reviewed Close Can workplace wifi track ip address to an employee's computer?
Feb
22
comment Realistically, how much added security does having a passphrase on a ssh key have?
Too short for a real answer: It protects the key from being accessed directly from a backup.