Information Security
Profile Activity
Meta user
Network profile
Colin Cassidy
Summary Answers Questions Tags Badges Bookmarks Bounties Reputation All actions

43 Answers

Votes Activity Newest
1
How is bcrypt able to generate secure random hashes? If someone nabs the hash from my db wouldn't they just be able to run it through bcrypt?
May 26 '17 at 13:00
12
Do (uncompromised) passwords ever need changing, if I use a password manager?
Jul 29 '16 at 15:35
3
Most secure way to read an int32 in C
Mar 24 '17 at 11:04
3
What is the intended attack vector of this email?
Mar 23 '17 at 14:02
2
When is memory allocation/layout deterministic?
Jan 20 '17 at 10:35
5
Attack Metasploitable using Nessus
Jan 19 '17 at 22:43
5
security issues in JWT storage
Jan 12 '17 at 12:51
2
Questions about code review (C)
Dec 7 '16 at 15:00
2
Unauthorised access to admin area of a rails app, from the company's IP
Nov 24 '16 at 13:14
2
Is it vulnerable to let users know their own and other users id from a database?
Nov 22 '16 at 9:17
1
Buffer overflow - Print “hello world”
Oct 18 '16 at 7:02
0
Is it insecure to let users know which framework I am using?
Oct 17 '16 at 8:32
2
What are safe solutions to protecting important credentials in source code
Oct 6 '16 at 12:40
12
Is it dangerous to compile arbitrary C?
Oct 6 '16 at 8:20
0
Could Common Vulnerabilities and Exposures (CVE) be used by the US government before being released?
Oct 4 '16 at 12:55
1
Export Nessus Professional vulnerability scan results listed by vulnerabilities
Sep 30 '16 at 9:44
3
C++ : memset on a struct containing std::wstring - Is it a risk?
Sep 23 '16 at 10:01
0
C program Segmentation fault exploit
Sep 22 '16 at 13:48
2
What can a company do against insiders going rogue and negatively affecting essential infrastructure?
Jul 28 '16 at 13:28
1
What is the current EU standard for data destruction?
Jul 7 '16 at 15:16
7
Do the skills of a software developer transfer well into working in computer security or white hat hacking?
Jul 5 '16 at 8:59
1
Short integer hashes to mitigate timing attacks on passwords
Jun 30 '16 at 12:42
3
What risk rating models are used for calculating risk scores of web vulnerabilities?
Jun 21 '16 at 9:26
7
SQL injection is 17 years old. Why is it still around?
Jun 27 '16 at 12:05
1
Why is it required in OAuth 2.0 that refresh token cannot be guessed?
Jun 22 '16 at 12:28
1
Detection of abnormal file access patterns
Jun 10 '16 at 8:21
0
Why not make the second factor the only factor?
Jun 9 '16 at 12:24
4
What is a good rebuttal to users who wish all data WITHIN Db be encrypted?
Feb 26 '14 at 15:41
5
Fuzzer causes crash. Now what?
Oct 14 '13 at 16:04
0
Blind SQL injection: understanding heavy queries
Jan 28 '13 at 10:52
1
2