606 reputation
34
bio website 0xdabbad00.com
location
age
visits member for 3 years, 4 months
seen Mar 27 at 3:54

Mar
12
comment Use password_hash() with a system-wide salt and a user-specific salt
@Darsstar, @brunoais: Do NOT do pass password_hash the output of hash_hmac, as explained at: blog.ircmaxell.com/2015/03/… This is a security concern as it increases the likelihood of password collisions because hash_hmac can return null bytes, and password_hash stops hashing after the first null byte it encounters.
Mar
12
awarded  Yearling
Sep
24
awarded  Autobiographer
Nov
26
awarded  Yearling
Jul
30
awarded  Nice Answer
Dec
6
awarded  Yearling
Dec
2
answered What is the most hardened set of options for GCC compiling C/C++?
Sep
29
answered What are the career paths in the (illegal) computer security field?
Sep
29
awarded  Supporter
Sep
29
answered Detecting reflective DLL injection
Dec
1
awarded  Teacher
Dec
1
answered Removable storage solution