Qwerky's user avatar
Qwerky's user avatar
Qwerky's user avatar
Qwerky
  • Member for 9 years, 11 months
  • Last seen more than a month ago
  • Berkshire, England, United Kingdom
comment
Is it safe to publish the hash of my passwords?
TL;DR if anyone could be bothered then they could probably brute force any weak passwords
awarded
comment
Data Encryption by Application vs Data Encryption in Database
If you use the database in built function to encrypt the data at rest (ie on disk) you should also look to encrypt the data in transit - ie ensure that the comms between your application and the DB is encrypted.
awarded
answered
Loading…
awarded
Loading…
comment
Should Failed Login Attempts Be Logged
If there is a distributed brute force attack then you should have other tools (eg fail2ban) to prevent the majority of login attempts even reaching your system.
awarded
Loading…
awarded
comment
Collecting credit card info in HTTPS iframe within an HTTP site
FWIW I'm implementing an iFrame payment form using a payment service provider. They insist that the page containing the iFrame is delivered on HTTPS.
answered
Loading…
comment
How can I explain to non-techie friends that "cryptography is good"?
This is a really important point. Banning encryption would do nothing. Encryption is already a thing the bad guys possess, outlawing it would mean nothing to people who are already outlaws. Murder is already outlawed, but the bad guys still do it.
awarded
revised
Difference between AES-128 CMAC & AES-128 ECB/CBC?
corrected "context" to "code" and added link
Loading…
comment
Listening to phone calls as user profiling for marketing
You say you haven't done a web search, but have you sent or received emails? Google's GMail scans your email and uses it to deliver "relevant" advertising.
answered
Loading…