602 reputation
313
bio website google.com
location Sin City (no, not Las Vegas)
age 42
visits member for 2 years, 4 months
seen 52 mins ago

I don't have any formal education on programming. I guess it is the passion that gets me started and keeps me going. Thanks everybody for sharing your knowledge. Don't worry, I am no critic. I see no wrong answer, only good and not so good answers. All are welcome to learn and to share.


59m
revised Security of a Random Password
fix calculation error
1h
answered Security of a Random Password
9h
comment Where are my passwords stored in browser?
It depends on your browser and OS. Different browsers implement it differently. One way is to store the password hash within an SQLite database located under the application directory. You may like to take a look at this article.
11h
awarded  Popular Question
2d
comment Imitation Gmail account created - what's the threat?
What Chris pointed out could also be true though I find it quite unlikely unless someone is using it as a disposable email address and did not pay any attention when signing up. It could also be a phishing attempt to trick your parents into linking up the two accounts. It is really hard to know the intention until something happens. Ignore my earlier comment, it is meant as a joke.
2d
answered Is the Google address being spoofed on my computer?
Sep
12
answered Ubuntu backup to only specific devices
Sep
11
comment Are social security numbers useless by themselves?
@Damon, there is nothing illegal about generating CC numbers. The Luhn algorithm is public information and there are several websites that help you generate CC numbers for testing purpose. You are correct to say that there are only limited (60,000-600,000) permutations of expiry dates and CVC numbers. Granted, any competent card issuing bank would implement security measures to detect such brute-forcing activities and block the card account.
Sep
11
comment Stopping nosey people on Facebook
"me too", "why?"
Sep
11
comment Can extra loading times on login attempts be a security threat?
Do you rely on the secrecy of the user name for the security of your application? If yes, then it is a threat, if no, then it is not.
Sep
11
comment Are social security numbers useless by themselves?
YES. Same goes with credit card numbers. You can generate a list of valid card numbers if you know the algorithm. But without other information like CVC and expiry date, it is practically useless.
Sep
9
comment Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
If you are robbed, you should call the bank immediately to report stolen card so that any purchases made thereafter is no longer your responsibility but the bank's.
Sep
9
comment Is it wrong to root login with SSH?
@TobiasKienzler, yes, you definitely can, but not recommended.
Sep
8
answered Is it wrong to root login with SSH?
Sep
8
comment Web browser initiating connection on non-standard ports. Should it be blocked?
I have omitted the timestamp and userid 1000 from the above iptables log. Don't have the process id but I suspect it is the browser based on the timestamp. I have tried host on the two IP addresses, but didn't yield much clue. Assuming that it is the browser, is there any risk or should I allow it to initiate connection from any port?
Sep
7
asked Web browser initiating connection on non-standard ports. Should it be blocked?
Sep
2
comment Questions about ddosing?
If the website does rate-limiting, it would be able to recover quite quickly.
Aug
30
answered How secure is this method to remember security questions?
Aug
24
comment Someone is trying to hack my PHP server
Log rotation is your good friend.
Aug
24
comment Why is “www.” considered unsafe in this HTTPS URL?
As David pointed out, SoundCloud is redirecting requests at https://www.soundcloud.com to http://soundcloud.com. Since https is dropped, your browser will complain of insecure content.