Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
6
Newest
 Commentator
Impact
~2k people reached

  • 0 posts edited
  • 1 helpful flag
  • 18 votes cast
Jul
30
awarded  Commentator
Jul
30
comment Input Sanitization vs Output Sanitization
I would call this output encoding instead of sanitization.
Jan
24
comment Checksum for authentication - is it reliable?
Unfortunately, I too am not an expert in cryptography, so I cannot answer whether your scheme is secure or not, but the general consensus is to not roll your own security scheme, see security.stackexchange.com/questions/18197/…
Nov
18
comment Best practice in web application security authentication to avoid bruteforce attack
If you use a cool-down of 1 second, for a password length of 8 using only upper and lower case A-Z, you would have on average 847598 years until it has been brute forced (with a naive implementation). (26*2)^8 / 60 / 60 / 24 / 365 / 2 = ~847598 years
Aug
27
comment Does CSRF prevention also prevent reflected XSS attack?
Using CSRF tokens to prevent XSS attacks seems to be fixing the problem by accident.
May
1
awarded  Popular Question
May
11
awarded  Scholar
May
11
comment MAC vs Encryption
Thank you for this information.
May
11
accepted MAC vs Encryption
May
11
comment MAC vs Encryption
This looks like it answers my question, this is to prevent the receiving end from trying to decypher garbage (hacked) text, and prevent the hacker from stumbling upon a valid message?
May
11
awarded  Supporter
May
11
awarded  Citizen Patrol
May
11
awarded  Student
May
10
revised MAC vs Encryption
edited tags
May
10
asked MAC vs Encryption