network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 2 months |
| seen | May 13 at 14:37 | |
| stats | profile views | 45 |
|
May 13 |
comment |
How does hashing work? Well if you're using a secure hash (>=256-bit digest size) then storing the hashed value of "password" is going to increase your storage size. In addition, if an attacker were ever to see that 50% of the user accounts had the same password hash, he'd know that all he'd have to do is crack one password and he has access to 50% of the user accounts. You should be "salting" your password hashes; there are a variety of methods, but the end result is that the same password hashed by the same algorithm produces a different digest, because of an additional unique salt value for each account. |
|
May 9 |
comment |
How do spammers verify the validity of a huge amount of email addresses? ... and in that case they don't care. |
|
May 1 |
comment |
Is publishing your public IP address a security threat? This. Posting your public IP on a message board might raise interest in trying to hack the computer or network behind it, but there's really no way to avoid someone else knowing about it (even if that person is the anonymous proxy gateway you route your traffic through). |
|
Apr 30 |
revised |
The security level in hash function deleted 1 characters in body |
|
Apr 12 |
comment |
How is “hacking” even possible if I “defend” properly? "As the defender, you must win 100% of the time. A hacker only needs to win once." - This, x1000. |
|
Apr 9 |
revised |
How does hashing work? added 250 characters in body |
|
Apr 9 |
answered | How does hashing work? |
|
Apr 5 |
comment |
DDoS - Impossible to stop? Short and sweet, but somewhat incorrect. Most DDoSs are the result of a botnet. Botnets, however massive, are a subset of the Internet, that attack by making sustained, rapid requests, often in a manner differing significantly from legitimate traffic (no legitimate user sends SYN after SYN without completing the handshake). More sophisticated attacks that turn legitimate users against a site (DNS hacking, malicious Slashdot-style linking) are harder to defend against, but also harder to pull off and control (as in Tom Leek's analogy; you set it up and hope for the worst). |
|
Apr 5 |
comment |
DDoS - Impossible to stop? @makerofthings - Your ISP is still trying to send all other traffic to you, and you still have to perform some cursory inspection of the packet to determine it's a rotten egg. It's a losing game; a coordinated DDoS attacker can add zombies more easily than you can reduce the time/effort needed to reject their packets. |
|
Mar 21 |
revised |
Future proof encryption possible in theory? added 9 characters in body |
|
Mar 20 |
awarded | Citizen Patrol |
|
Mar 11 |
revised |
Banking application login leaks information added 1 characters in body |
|
Mar 8 |
awarded | Yearling |
|
Mar 6 |
answered | what is the difference between a mac and a digital signiture |
|
Mar 6 |
comment |
Could once infected machine be ever trusted again? Regarding the last two sentences - While I totally get the point, I'm not sure that's fair; the whole point of modern computer/OS design is that you don't have to know the bits and bytes at the hardware layer in order to write quality end-user software. Saying that anyone who doesn't know how to store a virus on a keyboard's EEPROM shouldn't write software is like saying that anyone who can't pick a deadbolt shouldn't be replacing the exterior door of a house. Two completely different skillsets are required, and while one person may possess both, one does not require the other. |
|
Mar 6 |
revised |
How do I transfer the HMAC? added 565 characters in body |
|
Mar 6 |
revised |
How do I transfer the HMAC? added 565 characters in body |
|
Mar 6 |
answered | How do I transfer the HMAC? |
|
Mar 6 |
revised |
Implementation review - Independent key, admin side and user side added 5 characters in body |
|
Mar 4 |
answered | Basic Algebra and How it Applies to Information Security? |
