31,261 reputation
454106
bio website cloud101.eu
location Belgium
age 24
visits member for 3 years, 2 months
seen 2 hours ago

I'm a security analyst and consultant, I'm here to learn and help others out.

Opinions are my own. Advice provided with no warranty.

Find me on http://cloud101.eu


21h
comment Continuously checking gmail for mail
How do you figure is this related to information security?
Sep
25
comment What is the main function of xp_cmdshell in SQL Server and what are its related security issues?
I think that by default it's switched off and only SA has access to it (which should never be used to run queries).
Sep
25
answered What is the main function of xp_cmdshell in SQL Server and what are its related security issues?
Sep
23
comment how can we find the CSRF vulnerability in a website?
@AnanduMDas if you want to test properly you should read the complete OWASP guide.
Sep
18
answered Any advice on how to assure patients that a medical facility is well protected against identity theft?
Sep
17
comment My IP address (with a NAS) is targeted by a hacker. What to do? Should I be worried?
@DanNeely Ah yea sorry, I forgot, that's a complete valid reason to drop security.
Sep
15
comment My IP address (with a NAS) is targeted by a hacker. What to do? Should I be worried?
Why have you attached your NAS to the internet?
Sep
15
awarded  Good Answer
Sep
14
revised How To Patch LFI Vulnerability
added 4 characters in body
Sep
13
answered Does company email can access hangouts and private emails?
Sep
12
awarded  Enlightened
Sep
12
awarded  Nice Answer
Sep
12
comment Is my custom password hashing algorithm insecure?
PBKDF2 is NIST and FIPS approved, scrypt is theoretically stronger than bcrypt but less vetted. Either way PHP's function uses bcrypt, so I'd just go with the built in PHP function. All crypto resources can be found on this site (search button at the top) look for Thomas Pornin's answers.
Sep
12
answered Is my custom password hashing algorithm insecure?
Sep
11
answered Does mixing different types of encryption make the connection more secure?
Sep
10
comment Authenticate User Salted Hash Without Username
Ages of users are still prone to collisions. Ages of passwords defeat the purpose as well since you still don't have accountability. Also by disclosing two letters of the password you are weakining the password's strength, even in its hashed form.
Sep
10
answered Authenticate User Salted Hash Without Username
Sep
6
revised Is it wrong to root login with SSH?
added 11 characters in body
Sep
6
answered Is it wrong to root login with SSH?
Sep
5
comment Strongest cryptographic algorithm available in PHP 5.3
@CodesInChaos corrected that