376 reputation
1315
bio website martin-thoma.de
location Karlsruhe, Germany
age 24
visits member for 3 years, 3 months
seen Oct 15 at 11:52

I have also a blog.


Sep
24
awarded  Popular Question
Aug
29
awarded  Citizen Patrol
Aug
15
awarded  Famous Question
Jul
24
comment Can Windows malware harm a Linux computer when it's executed with Wine?
But doesn't Wine wrap / check system calls before they get executed? As far as I understand it, your code only proves that it is possible to have malware that attacks both, Windows and Linux, when it is specifically designed for that. But it would still need an exploit for Windows and another one for Linux, wouldn't it?
Jul
24
comment Can Windows malware harm a Linux computer when it's executed with Wine?
(By the way: The -1 is not from me.)
Jul
24
comment Can Windows malware harm a Linux computer when it's executed with Wine?
So what happens when this gets executed on a windows computer? What could happen when it gets executed on Linux via wine?
Jul
24
comment Can Windows malware harm a Linux computer when it's executed with Wine?
Please explain your code.
Jul
2
awarded  Curious
May
19
awarded  Popular Question
May
9
comment Is it a good idea to store Email addresses as hash only?
But they would not only need to find such a collision (which is hard in the first place, considering that I will switch from MD5 to something better) but also have to own that email address
May
9
comment Is it a good idea to store Email addresses as hash only?
@Bob: Oh, I just realized it myself. They could take over an account by using the "Password reset" function.
May
9
comment Is it a good idea to store Email addresses as hash only?
@Bob: How should you perform an attack with that? The "email" colum in my database has the "unique" attribute, so they could not add an Email with an collision.
May
9
comment Is it a good idea to store Email addresses as hash only?
@Navin I don't need to share them and I will not do so. But I hoped that hashing woulde be "secure enough" because it's easier to make a complete dump (as I also wrote in my question)
May
8
comment Is it a good idea to store Email addresses as hash only?
@Kitsune: Thanks. I will change that. See also: PHP crypt() or phpass for storing passwords? and How to generate a good salt with PHP
May
8
awarded  Commentator
May
8
comment Is it a good idea to store Email addresses as hash only?
Thank you for the long answer. To sum it up: It is quite likely I want to contact the user (e.g. inform them of a security breach) so I shouldn't hash the Email. On the other hand, hashing is an improvement over plain-text passwords / Emails, but it still should not be shared.
May
8
accepted Is it a good idea to store Email addresses as hash only?
May
8
asked Is it a good idea to store Email addresses as hash only?
Feb
3
awarded  Popular Question
Nov
18
comment Would this idea for a password be secure?
Your secure base reminds me of this: xkcd.com/936