724 reputation
819
bio website
location
age
visits member for 2 years
seen Mar 24 at 15:50

Aug
9
comment Is it okay to wrap a cryptographic hash with MD5 for storage?
@TerryChia Yes that's what I meant.
Aug
9
comment Is it okay to wrap a cryptographic hash with MD5 for storage?
If they crack the md5 hash what they get is another hash made with bcrypt for example.
Aug
9
asked Is it okay to wrap a cryptographic hash with MD5 for storage?
Aug
8
accepted Securely tell the user his password in new WHM/Cpanel account creation?
Aug
3
accepted Are my credentials unsafe if I am already logged-in before connecting to a public network?
Aug
3
asked Securely tell the user his password in new WHM/Cpanel account creation?
Aug
3
comment What was done to gain a list of home directory accounts?
@schroeder I see but aren't those commands accessible to root only? Do you think a file hosted on a shared cpanel account can actually run this?
Aug
2
asked Can /etc/passwd file be accessed on a cpanel shared hosting account?
Aug
2
comment What was done to gain a list of home directory accounts?
@symcbean Do you mean a PHP or Perl script can get all the data as presented in the text file?
Aug
2
comment What was done to gain a list of home directory accounts?
The video you posted is not WHM/Cpanel, that is a different product called WHMCS.
Aug
2
asked What was done to gain a list of home directory accounts?
Jun
19
comment Are my credentials unsafe if I am already logged-in before connecting to a public network?
Is HTTPS is still considered safe? I just read about "SSL Strip" and it seems SSL is no longer safe.
Jun
18
asked Are my credentials unsafe if I am already logged-in before connecting to a public network?
Jun
16
asked What's the idea behind requiring users to change password periodically?
Jun
16
awarded  Critic
Jun
3
comment Should passwords be revealed in error message?
@D.W. They marked it private, not sure why.
Jun
2
awarded  Nice Question
May
30
comment Should passwords be revealed in error message?
stackoverflow.com/questions/8619253/…
May
30
comment Should passwords be revealed in error message?
Other examples: stackoverflow.com/questions/7924935/…
May
30
comment Should passwords be revealed in error message?
@symcbean heavy traffic is another probable cause of this in a production server. Example: stackoverflow.com/questions/6455018/…