network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 6 months |
| seen | May 14 at 18:28 | |
| stats | profile views | 24 |
email is acidzombie24@gmail.com
|
May 9 |
awarded | Popular Question |
|
May 8 |
awarded | Taxonomist |
|
Oct 29 |
awarded | Nice Question |
|
Oct 24 |
awarded | Yearling |
|
Oct 18 |
answered | Is there any security value of creatively naming folders containing sensitive files? |
|
Sep 24 |
comment |
Why do some sites prevent users from reusing their old passwords? @Joren I just use keys (ssh! github!). I also use passwords like sdfhsdfsdhfhfdfysdfysga and copy/paste them somewhere i consider safe |
|
Sep 21 |
awarded | Custodian |
|
Sep 21 |
answered | How can I avoid putting the database password in a perl script? |
|
Sep 18 |
comment |
How/When do i use HMAC? If anyone is curious what i wanted to know was hmac is a way to sign data using a symmetrical key. "Its more complex then hashing the message and key together which is not secure" is a bonus. |
|
Sep 18 |
comment |
How/When do i use HMAC? I did and Gilles explained it better. |
|
Sep 18 |
accepted | How/When do i use HMAC? |
|
Sep 13 |
comment |
How/When do i use HMAC? It still isn't super clear but now I figured it out. I use .NET to give me back a hash when signing so I never had to deal with this (I suspect they use HMAC but i am too lazy to confirm atm). Now I understand it as the technique used to sign data. HMAC is simply the hash data you attach with a message for use of verifying that the data has been signed with that key. I always have done signing with an asymmetrical key, I didn't realize it was done with a symmetrical key. I understand now. +1 accepted even tho it it isnt super clear in the answer. |
|
Sep 13 |
answered | In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption? |
|
Sep 13 |
comment |
How/When do i use HMAC? I still don't understand why the key is in the message? Do I not know the public key of the party? If I know the public key then why is the key in the message rather me using the already known key? If I don't know the key then why would i trust that party? |
|
Sep 13 |
asked | How/When do i use HMAC? |
|
Sep 2 |
comment |
SHA, RSA and the relation between them @chris: software signing 'verifies' data integrity. And signed data is a hash but has an associated with it. I'd say SHA ensure data integrity when the author identification is not required (as in you dont care who i am. Just if the package i am offering is intact). |
|
Sep 2 |
comment |
What role does cryptography play in anti-piracy? One role is encrypting the game before it goes out. The game will be pirated and cracked but at least when dvds or digitals downloads go out the game cant be cracked or looked at before the official release date. This is what starcraft2 did. However i dont believe crypto can stop anti piracy |
|
Jul 24 |
comment |
Does the salt need to be unique or not predictable? Gotcha, thanks for explaining. |
|
Jul 23 |
accepted | Does the salt need to be unique or not predictable? |
|
Jul 23 |
comment |
Does the salt need to be unique or not predictable? The only extra protection i see is you're pretty much storing extra data in the db to use with the hash. Why would one bother? If the attacker has access to the config file he'll have access to the DB (via user/pass in the config) so he'll have access to that extra data. (if this is via ssh then db reads wont show up in server logs. If config data access via exploit on web then weblogs shows it like sql attack). If i used signed ipaddr+date as a salt (both should be unknown) would that satisfy your conditions? But i'm still not convinced the salt needs to be random while the pepper is secret. |
