Reputation
8,236
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 24 39
Newest
 Enlightened
Impact
~436k people reached

Apr
25
comment Does quick denial tell that you passwords are stored in plain text?
1) 10k iterations is very low for PBKDF-HMAC-SHA-1/2. 2) My calculation suggests about 600-800 computations of PBKDF-HMAC-SHA-1 on a fast single core CPU. 3) You can use parallelism to increase throughput but not latency, for typical password hashes.
Apr
25
comment Does quick denial tell that you passwords are stored in plain text?
If it takes less than 10ms to confirm a password, your work factor is too low.
Apr
19
comment Why are short-lived certificates so rare?
What excites me about Let's Encrypt isn't that it's free, but that it promises to automate certificate management.
Apr
19
comment Are RSA Key Pairs unique?
How many RSA keys before a collision? and uniqueness of the RSA public modulus
Apr
18
comment What should you do if you catch ransomware mid-operation?
A well written ransomware could use a new key for each file and erase the previous key after it finished encrypting each file. But I don't think they have evolved to that level yet.
Apr
15
comment SSL Certificate in my hosting makes me change my java code?
The attack you describe is commonly known as SSLStrip
Apr
12
comment Why most people use 256 bit encryption instead of 128 bit?
@Pacerier My point is that the security advantage of forward-secrecy is much bigger than the security advantage of 256 bit symmetric crypto (lavabit is a famous example for why you need FS). So they're prioritizing weaker crypto over stronger crypto. Also it's rather pointless to use 256 bit symmetric crypto when your handshake only offers 112-128 bits of security (and is completely broken to quantum computers). A chain is only as strong as its weakest link, 128 bit symmetric crypto is generally not the weakest link.
Apr
9
revised Why is whatsapp Inc. still caching user data even after introducing the end to end encryption?
deleted 12 characters in body
Apr
7
comment Reviews of Argon2
I for one wouldn't use if for several years from now.
Apr
7
revised Hide data from user, but process it in application
edited tags
Apr
7
comment Hide data from user, but process it in application
Using treacherous hardware (Intel SGX, TPM) etc. it might be possible to make attacks really hard.
Apr
7
comment Hide data from user, but process it in application
In software all you can do is throw lots of obfuscation at your program and hope that nobody care enough to unravel the mess.
Apr
6
comment Is it easy to protect against SSI injection?
Input validation is almost never the answer to injection problems. You generally need to apply proper output encoding.
Apr
3
revised How to deal with WPE users
added 2 characters in body
Apr
1
comment Gmail never actually deletes emails?
Did you try deleting from the web interface?
Mar
31
comment Keylogger web application protection
I'd consider using U2F over traditional one-time passwords.
Mar
22
comment Are ZeroNet websites susceptible to 51% control attack?
I'm not familar with ZeroNet, perhaps a 51% attack allows rolling back a website to an earlier version but not forging the content itself.
Mar
22
comment Where can I get a list of “bad” IP addresses that are likely to be used by attackers or spammers?
For IPv4: 0.0.0.0/0
Mar
22
comment Should passwords be automatically reset when the underlying method changes
@wb9688 I wouldn't use argon2 yet, too new for my taste. I prefer either bcrypt or scrypt.
Mar
17
comment How is SHA-1 insecure if it is not vulnerable to what MD5 is?
Duplicate on crypto.se: No SHA-1 collision? Yet SHA-1 is broken?