1,232 reputation
38
bio website shivampatel.net
location New York, United States
age
visits member for 2 years, 3 months
seen 2 days ago

I code! Do you?


Feb
7
awarded  Nice Answer
Jan
6
awarded  Yearling
Dec
30
answered Password security
Oct
11
awarded  Enlightened
Oct
11
awarded  Nice Answer
Sep
26
comment Why does everyone require certain password characters now?
Well I understand that salts are NOT a secret and they are stored in plain text. Afterall, you need to store the salt (or the pepper) to validate the password. All I am trying to say is a scenario where an attacker just manages to get the hashes (as against a full database table). In such a case, he has two things to brute force - the password as well as the salt. Now in this case if a very easy password like 'password' helps in revealing that the salt is probably a 2 character string, then attacker has a definite advantage for cracking the rest of the passwords. Isn't it ?
Sep
25
comment Why does everyone require certain password characters now?
Well I meant what if you only have hashes. What do you do to crack the password then. Brute force password and brute force salt, isn't it ? In such an approach what if you find out that the salt is only a 2 character string !! Does it not make your job easier ?
Sep
25
revised Why does everyone require certain password characters now?
added 6 characters in body
Sep
24
answered Why does everyone require certain password characters now?
Sep
23
revised Why: Default salt and cipher seed value at Cake PHP Framework?
grammer
Sep
23
answered Why: Default salt and cipher seed value at Cake PHP Framework?
Sep
22
answered Elaborate Hacking attempt detected - now what?
Sep
20
answered PHP gethostbyname security implications
Jan
6
awarded  Yearling
Oct
17
comment Is it safe to store twitter access tokens client side?
did you mean access_token_key and access_token_secret ?
Oct
8
revised How to disable caching of form data?
corrected block diagram and added cache-control header info
Oct
8
comment How to disable caching of form data?
+1 Glad this question was asked. Reposting login creds on page refresh just renders the entire authentication system broken.
Oct
8
revised How to disable caching of form data?
corrected block diagram
Oct
8
answered How to disable caching of form data?
Sep
14
comment anonymization for scanning and hacking
@D.W. Thanks for rewording. I realize that the original verbiage was indeed suggesting that I am asking him to do it that way. Cheers!!