Reputation
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
1 10 18
Newest
 Nice Answer
Impact
~209k people reached

  • 0 posts edited
  • 0 helpful flags
  • 274 votes cast
2h
comment How to securely transfer password from a registration page to the database
@MikeOunsworth - Well i changed it to information, maybe that's indeed more understandable.
2h
revised How to securely transfer password from a registration page to the database
edited body
2h
comment How to securely transfer password from a registration page to the database
@MikeOunsworth - Todays browsers contain a list of root certificates, which are installed together with the browser. Only with those known root certificates, the browser is able to verify a derrived certificate of your website. If the root certificate where not known to the browser before the connection is up, there would be no way to verify the certificate, because you do not have a secure connection (that's why self signed certificates are not trusted).
2h
answered How to securely transfer password from a registration page to the database
Feb
7
comment How to hack a smartphone by using the phonenumber
The opposite way is more likely, that they got control over the phone and therefore knew the number.
Nov
18
comment Is it OK to reuse the same SALT key across multiple deployments?
It seems that you are talking about encryption (two way), then you need an IV not a salt. Both salt and IV should be unique and should not be reused.
Nov
14
revised Password manager's hash choices (scrypt + sha256)
Just to be more precise
Nov
13
comment Is it possible to be a hacker without being a criminal?
Maybe you could apply for a job at the NSA?
Nov
13
revised Password manager's hash choices (scrypt + sha256)
added 108 characters in body
Nov
13
answered Password manager's hash choices (scrypt + sha256)
Nov
5
answered Must an encrypted hash value be bigger than the password it was generated from?
Oct
29
awarded  Nice Answer
Oct
23
awarded  Guru
Oct
23
awarded  Mortarboard
Oct
23
awarded  Good Answer
Oct
22
awarded  Nice Answer
Oct
22
answered Is using bcrypt on existing SHA1 hashes good enough when switching password implementation?
Aug
14
comment Hashing Algorithms Costs vs Sleep
Your first point is incorrect, if the hash algorithm is slow, this will thwart offline brute-force attacks. The slowness has to come from the necessary cpu time and not from a sleep() that can be circumvented though. That's why one should use a slow hash algorithm with a cost factor.
Aug
14
answered Hashing Algorithms Costs vs Sleep
Jul
25
awarded  Constituent