Reputation
2,962
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
1 11 19
Newest
 Yearling
Impact
~223k people reached

  • 0 posts edited
  • 0 helpful flags
  • 283 votes cast
1d
comment Could keystroke timing improve security on a password?
The PC keyboard, the notebook keyboard and the smartphone keyboard would definitely create different passwords in my case.
Apr
22
comment How to kill a Wi-Fi network?
Find the owner and ask him to shut down the access point? Surely you have legal reasons and the owner will understand your inquiry.
Apr
16
revised Password Hashing add salt + pepper or is salt enough?
Wanted to point out a better alternative to peppering
Apr
15
comment when to use encoding over hashing?
When you encode data, you bring it into a form, so a certain system can work properly, it has nothing to do with security. An example is the URL encoding, which can be used to bring an URL into a form, so the browser wont mix up control-characters and characters from the address.
Apr
14
revised Should the salt of a bcrypt hashed password be stored separately
added 170 characters in body
Apr
14
revised Should the salt of a bcrypt hashed password be stored separately
added 170 characters in body
Apr
14
answered Should the salt of a bcrypt hashed password be stored separately
Mar
11
awarded  Yearling
Feb
12
awarded  passwords
Feb
11
comment How to securely transfer password from a registration page to the database
@MikeOunsworth - Well i changed it to information, maybe that's indeed more understandable.
Feb
11
revised How to securely transfer password from a registration page to the database
edited body
Feb
11
comment How to securely transfer password from a registration page to the database
@MikeOunsworth - Todays browsers contain a list of root certificates, which are installed together with the browser. Only with those known root certificates, the browser is able to verify a derrived certificate of your website. If the root certificate where not known to the browser before the connection is up, there would be no way to verify the certificate, because you do not have a secure connection (that's why self signed certificates are not trusted).
Feb
11
answered How to securely transfer password from a registration page to the database
Nov
18
comment Is it OK to reuse the same SALT key across multiple deployments?
It seems that you are talking about encryption (two way), then you need an IV not a salt. Both salt and IV should be unique and should not be reused.
Nov
14
revised Password manager's hash choices (scrypt + sha256)
Just to be more precise
Nov
13
comment Is it possible to be a hacker without being a criminal?
Maybe you could apply for a job at the NSA?
Nov
13
revised Password manager's hash choices (scrypt + sha256)
added 108 characters in body
Nov
13
answered Password manager's hash choices (scrypt + sha256)
Nov
5
answered Must an encrypted hash value be bigger than the password it was generated from?
Oct
29
awarded  Nice Answer