283 reputation
210
bio website
location
age
visits member for 3 years, 1 month
seen 17 hours ago

Aug
7
comment How do I protect my Gmail account when accessing it via an Android smartphone?
@Ramhound That still leaves anyone who finds my phone with access to the application-specific password until I notice the missing phone and can disable it.
Jul
20
comment To salt, or not to salt?
A salt alone doesn't prevent anyone from getting the password from the hash, it only prevents the use of rainbow tables. If you use a fast hash like md5 or even SHA-512 an attacker can still brute-force even reasonably strong passwords using GPUs. You have to use a slow hash designed for this purpose like PBKDF2, bcrypt or scrypt.
Nov
8
comment Are bookmarklets safe with facebook data?
You can examine the source code of the bookmarklet, if you speak Javascript, to be sure.