2,099 reputation
515
bio website
location Brisbane, Australia
age
visits member for 3 years, 2 months
seen Nov 4 at 20:14

Oct
15
revised Securing user supplied files in IIS
Improved readability of the question based on comments.
Oct
15
comment Securing user supplied files in IIS
Can you clarify if you mean: 1. that your website accepts files from the "general public" but they should be able to see them after they have been uploaded. 2. Your website is published on the Internet but you only want authenticated users to access the website.
Oct
15
comment How secure is HMAC
JWT relies on a key to sign or encrypt the token, so an attacker could create the JSON but without the correct key the attack should fail. You need to ensure that your API only accepts valid tokens. And preferably use a more secure hash algorithm like SHA256.
Oct
15
awarded  Custodian
Oct
15
reviewed Approve suggested edit on How secure is HMAC
Oct
15
revised How to store a group password for multi-user server-client web-application?
Updated the answer based on additional comment.
Oct
15
revised How to store a group password for multi-user server-client web-application?
Updated the answer based on additional comment.
Oct
12
comment Use token for Windows Server 2008 AD RMS
Is the question that you want to protect all the documents on a computer with RMS?
Oct
12
answered How to store a group password for multi-user server-client web-application?
Sep
30
awarded  Explainer
Sep
15
awarded  Yearling
Sep
15
awarded  Yearling
Feb
12
awarded  Nice Answer
Feb
3
comment What is the “derive” key usage?
Are you able to provide the OID of the key usages (e.g. 1.3.6.1.5.5.7.3.1)
Dec
25
comment At what level of abstraction should a developer work with with regards to cryptography?
Obfuscation has it's place but not everywhere is the right place. Equally obfuscation can decrease internal understanding of a configuration by the people who run it, this increases the risk of error, which decreases security over time and also reduces the ability to detect security events of interest.
Sep
15
awarded  Yearling
Jul
24
comment What are the vulnerabilities of using NFC on my Samsung SGS3?
Clarification, NFC is capable of two way communication. RFID is not.
Jul
24
comment What are the vulnerabilities of using NFC on my Samsung SGS3?
Do you have any supporting references?
Jul
12
revised Is there a way to mitigate BEAST without disabling AES completely?
edited tags
Jul
3
comment What prevents people getting charged over NFC in crowded places?
Additional information from 2006. events.iaik.tugraz.at/RFIDSec06/Program/papers/…