Reputation
Next tag badge:
670/400 score
77/80 answers
Badges
19 169 264
Newest
 aes
Impact
~3.1m people reached

Apr
17
answered Should the requirement of admin privileges be extended?
Apr
16
awarded  Nice Answer
Apr
15
awarded  Good Answer
Apr
12
awarded  Good Question
Apr
11
comment What's the most secure technique for authenticating user in a website?
A single cryptographic hash is incredibly weak. You should switch to a strong KDF such as bcrypt. See this question for details on how/why.
Apr
10
comment Is it illegal to test a website and report the security bugs to them?
Yup. Largely depends on how much the government (dis)likes you.
Apr
10
comment What's the most secure technique for authenticating user in a website?
Are you hashing the passwords using a strong KDF such as bcrypt or PBKDF2? Single-round solutions using salted SHA1 or MD5 are considered very weak these days.
Apr
9
answered What are the parameters to be logged in a web application?
Apr
9
comment Does excluding username letters from passwords increase security?
This does sound pretty dumb. Not allowing the full username in the password is fine, but not allowing any letter from the username is ridiculous.
Apr
9
reviewed Edit spoofing tag wiki
Apr
9
revised spoofing wiki description
Tag use was clear - no need for first sentence. / fixed punctuation & formatting
Apr
9
reviewed Edit spoofing tag wiki excerpt
Apr
9
revised spoofing wiki excerpt
Last part was unnecessary - spoofing doesn't have to be via packets.
Apr
9
answered How a DOS TCP packet different from normal Packet?
Apr
8
awarded  Nice Answer
Apr
8
revised Is there additional security value in using passwords with words or phrases in non-English languages?
links to other q's
Apr
8
comment Is there additional security value in using passwords with words or phrases in non-English languages?
By that logic, "Passw0rd" is a good password.
Apr
8
answered Is there additional security value in using passwords with words or phrases in non-English languages?
Apr
8
reviewed Approve
Apr
8
reviewed Reject enumeration tag wiki