meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | 67 | |
| visits | member for | 1 year, 7 months |
| seen | May 17 at 17:36 | |
| stats | profile views | 1,170 |
I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).
|
May 17 |
comment |
Protecting Password Hashes with Store Procedures? A server which receives requests of the type "I got this password for this user name, is it OK ?", and sends answers "yes" or "no". |
|
May 15 |
awarded | Nice Answer |
|
May 13 |
comment |
Cascading Encryption Algorithm using mcrypt or GnuGP "Lack of practical use" is the polite way of expressing it. Personally, I would have said that cascading algorithms is bloody stupid. I am somewhat disappointed in TrueCrypt for indulging in such voodoo. |
|
May 13 |
answered | Making undeterminable containers inside existing file system |
|
May 13 |
answered | Cascading Encryption Algorithm using mcrypt or GnuGP |
|
May 13 |
comment |
optimal way to salt password? Reliably maintaining a counter is hard across reboots, and hard when there are multiple frontends as well. DNS names are unique worldwide but not necessarily forever (domains are sometimes abandoned and then registered again by someone else); also, uniqueness does not work for internal, closed networks. Apart from that, it would work. |
|
May 11 |
comment |
How can I punish a hacker? The said hacker already spends his nights on his computer, alone, staring at his bleak screen, looking for vulnerabilities and installing backdoors. How could you possibly punish him any further ? |
|
May 10 |
answered | security implications of Java's System.load vs System.loadLibrary |
|
May 10 |
answered | any reason not to run tmux/wemux on a bastion host? |
|
May 10 |
answered | Protecting Password Hashes with Store Procedures? |
|
May 10 |
answered | Technical security issues with proactively executing a phishing campaign targeting your own users |
|
May 10 |
comment |
Does ssh-keyscan tell you if a server supports RSA or DSA keys?ssh-keyscan tells you which key types are used by the server for its own part. If a server has a key of a given type, then it has code to support that kind of key, but it does not necessarily mean that it will support similar key types for authenticating clients. And neither in the other direction. That's not a reliable inference to make. |
|
May 10 |
answered | Does ssh-keyscan tell you if a server supports RSA or DSA keys? |
|
May 8 |
answered | Should I enforce a password policy on a web site? |
|
May 4 |
answered | Blocking network access to host(s) at the kernel level in Linux? |
|
May 3 |
answered | Full-disk encryption and theft mitigation? |
|
May 2 |
answered | Why would a website allow answers to security questions to be used interchangeably? |
|
May 2 |
answered | How can a DoS attack be used as part of the 'Gaining Access' phase of a hack? |
|
May 2 |
answered | Is access to the caller API in mobile phones a real security threat? |
|
May 2 |
answered | HMACSHA512 versus Rfc2898DeriveBytes for password hash |
