Reputation
262
Top tag
Next privilege 300 Rep.
Create new tags
Badges
2 11
Newest
 Tumbleweed
Impact
~7k people reached

2d
awarded  Tumbleweed
Aug
25
comment Is there any problem using empty salts with PBDKF for this purpose?
How many keys do you need - one or many? If just the one, then any salt ought to do, if many - wouldn't the salt mitigate the use of symmetric key re-use?
Aug
25
awarded  Critic
Aug
25
awarded  Commentator
Aug
25
comment Is Postgres password-based authentication secure?
@Tom_Leek - could you revise your answer in light of the answer below and the use of random salt? To me it seems like it has the strength of challenge-response and is not susceptible to replay?
Aug
20
asked Struts standard administrative actions unprotected - so what?
Aug
20
awarded  Notable Question
Jan
12
answered Malware known for stealing private ssh keys
Jan
12
comment Advanced techniques for detecting a proxy/getting original IP
To add to the above answer, the OP may simply may have made mistakes when configuring proxy, the site may decide that logging in from 2 different IPs within an hour is a security risk or finally not work unless JavaScript is enabled. In short, the odds are that the site isn't detecting a proxy (althogh MaxMind does have a neat proxy blacklist which some sites can use), but rather weirdness and scraping.
Dec
14
answered Yubikeys & SSH - which option is best for lockdown?
Dec
4
awarded  Popular Question
Sep
24
awarded  Autobiographer
Jun
9
revised Are legal notices in a login banner legally significant in terms of computer misuse?
Fixed spelling, added links
Jun
9
comment Are legal notices in a login banner legally significant in terms of computer misuse?
Also, I can't find any eHippie vs WTO case-law or even court proceedings.
Jun
9
awarded  Editor
Jun
9
revised Are legal notices in a login banner legally significant in terms of computer misuse?
updated title
Jun
9
comment Are legal notices in a login banner legally significant in terms of computer misuse?
Hello, very interesting. Having briefly researched all three examples, I can't find that login banners played a crucial or any role in either of them. In cases 1 and 3 from what I gather there is a question of reasonable expectation of privacy vs "special needs" and the bargain part doesn't really come up. In (3), the case is settled so I'm not sure if any case-law has been established.
Jun
9
suggested approved edit on Are legal notices in a login banner legally significant in terms of computer misuse?
Jun
8
asked Are legal notices in a login banner legally significant in terms of computer misuse?
Jan
20
awarded  Popular Question