1,262 reputation
38
bio website shivampatel.net
location New York, United States
age
visits member for 2 years, 7 months
seen 47 mins ago

I code! Do you?


Jul
2
comment How do I get a third-party-signed ssl client certificate?
The other application's admin can generate a client certificate signed by their own internal CA and hand it to you, which in turn you can pass on to them to authenticate your client. Since they issued the client cert, they should be able to verify it. This solution doesn't require any real CAs like verisign etc. Will something like this not work for you?
Feb
7
awarded  Nice Answer
Jan
6
awarded  Yearling
Dec
30
answered Password security
Oct
11
awarded  Enlightened
Oct
11
awarded  Nice Answer
Sep
26
comment Why does everyone require certain password characters now?
Well I understand that salts are NOT a secret and they are stored in plain text. Afterall, you need to store the salt (or the pepper) to validate the password. All I am trying to say is a scenario where an attacker just manages to get the hashes (as against a full database table). In such a case, he has two things to brute force - the password as well as the salt. Now in this case if a very easy password like 'password' helps in revealing that the salt is probably a 2 character string, then attacker has a definite advantage for cracking the rest of the passwords. Isn't it ?
Sep
25
comment Why does everyone require certain password characters now?
Well I meant what if you only have hashes. What do you do to crack the password then. Brute force password and brute force salt, isn't it ? In such an approach what if you find out that the salt is only a 2 character string !! Does it not make your job easier ?
Sep
25
revised Why does everyone require certain password characters now?
added 6 characters in body
Sep
24
answered Why does everyone require certain password characters now?
Sep
23
revised Why: Default salt and cipher seed value at Cake PHP Framework?
grammer
Sep
23
answered Why: Default salt and cipher seed value at Cake PHP Framework?
Sep
22
answered Elaborate Hacking attempt detected - now what?
Sep
20
answered PHP gethostbyname security implications
Jan
6
awarded  Yearling
Oct
17
comment Is it safe to store twitter access tokens client side?
did you mean access_token_key and access_token_secret ?
Oct
8
revised How to disable caching of form data?
corrected block diagram and added cache-control header info
Oct
8
comment How to disable caching of form data?
+1 Glad this question was asked. Reposting login creds on page refresh just renders the entire authentication system broken.
Oct
8
revised How to disable caching of form data?
corrected block diagram
Oct
8
answered How to disable caching of form data?