As far as I can tell, this scheme doesn't make any sense. As you've noted, you still need to store the plaintext email address for the user, so there isn't any significant security benefit to using the plaintext email and email + password + salt hash vs just using plaintext email and password + ...
We are only a few hours into Winterbash, and already almost all the secret hats have been found and understood.
This is all very well, but it leads to a very rapid spike of posts and votes (not necessarily useful ones) to copy them.
As they are all explained at the end of Winterbash anyway, I'd...
So - I obviously fail at twitter. I thought tweeting about this would get me my final upvote on the answer, but no...security.stackexchange.com/a/58217/485
@RoryAlsop because my earnings were above their expectations, I just had to preemptively pay 6K$. And thats (local equivalent of) social security, not even the income tax yet.
@RoryAlsop right. so I paid preemptively, on the recommendation of my accountant, so that at least I wouldnt have to pay interest on the fines they will hit me with retroactively next week 6 months from now.
No, you are just being paranoid.
You were probably already connected to him over WiFi. There are many attacks he could have run this way without additional devices. Also if he would have wanted to hack you, he would not have thrown his strange hacking device in your face. He would have hidden it...
So the final exam for my differential equations class wasn't nearly as brutal as I was expecting. I would've finished in a half hour, but I still can't do integrals to save my life.
@Iszi - It tends only to be remote desktop or citrix that is allowed through. Also, while I tend to agree with your definition of "air gap" not everyone does. — paj281 hour ago
@raz And you'll get it next time. After my little mishap, I managed to log in for 517 consecutive days, before I intentionally took a day off. Then 115 after that, before I took another day off just a couple of weeks ago.
Sony recently saw a large amount of data stolen. In order to prevent the stolen data from being spread using torrents, they are doing what was called a bad seed attack. What is this attack? Is this a known attack or some term they coined for what is happening in this specific case?
Here's an exc...
I could swear I've seen mention that newer versions of PsExec don't send passwords in the clear, but I can't find it now. Anyone know when that started - link for reference?
I've been tasked with working out a bot mitigation facility here. So far this seems to be what pops up in google for "HTTP Bot mitigation":
https://github.com/yuri-gushin/Roboo
I've been perusing this as an option, but I want to know if there's been anything that achieves the same goal but whic...
I'm not entirely sure this isn't spam. It is clearly one of the worse answers ever, but also looks suspiciously like some of the better blog spam out there that tries to add non-spammy content to confuse filters.
Peer-to-peer (P2P) is a decentralized communications model in which each party has the same capabilities and either party can initiate a communication session. Unlike the client/server model, in which the client makes a service request and the server fulfills the request, the P2P network model al...
@LucasKauffman hmm that's a trendy "whisky of the year" thing, I'll bet they feel compelled to go with more unusual stuff... not that I've got anything against japanese whisky, not tried it yet..
@raz that's exactly it, just a dram a day but still
@RоryMcCune honestly, I have a bottle and it can really compete with the Scottish single malts (I'm just pulling your leg, scottish original is still the best)
but they're bloody expensive
like even more expensive that Scottish single malts
I've been tasked with working out a bot mitigation facility here. So far this seems to be what pops up in google for "HTTP Bot mitigation":
https://github.com/yuri-gushin/Roboo
I've been perusing this as an option, but I want to know if there's been anything that achieves the same goal but whic...
