1,432 reputation
1513
bio website martinstoeckli.ch
location Switzerland
age 41
visits member for 2 years, 4 months
seen 20 hours ago

I belong to the lucky people, who can combine job and hobby, in my case writing software. Coming from the Delphi world, i'm working more and more with CSharp and use PHP for my spare time project, an internet lost-and-found office.

// Don't tell people not do something, explain the reasons and let them think for themselves.


Sep
1
revised Do salts have to be random, or just unique and unknown?
added 5 characters in body
Sep
1
revised Do salts have to be random, or just unique and unknown?
Justification about salt thwarting brute-force attacks.
Sep
1
revised Do salts have to be random, or just unique and unknown?
added 96 characters in body
Sep
1
answered Do salts have to be random, or just unique and unknown?
Aug
29
revised Why is password hashing considered so important?
Thanks TRiG for your corrections (english isn't my native language), but this point is necessary.
Aug
29
awarded  Custodian
Aug
29
reviewed Approve suggested edit on Why is password hashing considered so important?
Aug
29
answered Why is password hashing considered so important?
Aug
27
answered Please help verify my understanding of Domain Validation (DV) SSL Certificate
Aug
23
comment 419 Nigerian scam problem
@eternalidiot - Macs are handling the file type separately as far as i know. If opening this pictures is the only thing you did, i wouldn't worry too much about your computer. Opening pictures is what a browser does all the time.
Aug
23
comment 419 Nigerian scam problem
@eternalidiot - So then you could check, whether they are real pictures you opened. On Windows systems, the file extension is important, normal pictures have an ending like filename.jpg or filename.png. Executeables have an ending like filename.exe but can try to hide this with filename.jpg.exe, because Windows will hide the last part. I don't know how experienced you are, but this is a check i would do, it is very unlikely that real pictures are harmful.
Aug
23
comment 419 Nigerian scam problem
@eternalidiot - Why do you think your computer could be compromised? There are two ways to become infected, either you opened an email attachement, or you clicked a link they sent to you. Did you do either of them?
Aug
23
comment 419 Nigerian scam problem
Which password(s) did you gave them? What type of other information do they have, beside your e-mail address?
Aug
17
comment How long would it take to brute force the AES encryption?
There are quite a lot of problems with this code. You should have a look at PHP's new password api password_hash(), there exists also a compatibility pack for earlier PHP versions. If you want more in-depth information, you may be interested in my tutorial about storing passwords.
Aug
17
revised What are the benefits and drawbacks of emailing a user a login token/link?
added 203 characters in body
Aug
17
answered What are the benefits and drawbacks of emailing a user a login token/link?
Aug
10
comment Is there any reason I shouldn't use SHA1 of salt + website name + master password for my password in websites?
@user29349 - I'm not absolutely sure that i understood your question correctly, but keep in mind that today (2013) one can calculate about 3 Giga SHA1 hashes per second with common hardware. That leaves a lot of room for brute-forcing.
Jul
20
awarded  Popular Question
Jul
2
comment Session token is not changed on login?
@buherator - The OP's original question was more about whether a website can be secure, if it doesn't regenerate the session-id after a login.
Jul
2
answered Session token is not changed on login?