meta user
network profile
| bio | website | coreyogburn.com |
|---|---|---|
| location | Oklahoma City, OK | |
| age | 23 | |
| visits | member for | 1 year, 10 months |
| seen | Mar 25 at 16:37 | |
| stats | profile views | 4 |
A Computer Science college student, I have a real passion to learn everything I can about being a good developer. Not simply just how to make code accomplish a task, but how to accomplish the task legibly, efficiently, and reliably. I write a blog of my experiences for those who have the passion to develop but may need a bit of direction. Aimed at college students who are first dipping their toes into real development projects in school or on the job, the blog is filled with entries of advice, a few of my personal projects, and even some case study style projects where I walk readers through the design, implementation, and (sometimes inevitable) redesign and reimplementation of a project... sort of walking them through a project life cycle.
|
Mar 25 |
comment |
Reverse engineering a hash? Just FYI, this is where the "hash" (encoding/obfuscation) was used. |
|
Feb 21 |
awarded | Popular Question |
|
Jul 8 |
awarded | Taxonomist |
|
Feb 23 |
comment |
Reverse engineering a hash? Is there a name for this encoding? |
|
Aug 4 |
awarded | Editor |
|
Aug 4 |
revised |
Reverse engineering a hash? clarified the "off by 20" sentence |
|
Aug 4 |
suggested | suggested edit on Reverse engineering a hash? |
|
Aug 4 |
comment |
Tactics available to help prove security of a new system? I understand what your saying and I know I have a huge amount of work ahead of me, but I really feel like I'm on to something. I asked this question because even though I've gone through years of research, I accept the fact that I don't know everything and that I have a lot to learn from my peers in the field, not to mention we're in beta and if I don't ask it, somebody eventually will. I've worked for years researching, testing, breaking, re-breaking, and expanding on the cipher I do have. I'm going to fail a lot before I succeed, but I only need to succeed once. |
|
Jul 19 |
comment |
Tactics available to help prove security of a new system? We've (my buddy and I) been looking into security the entire time, from day one. We've looked into many different attacks and have been researching implementation details in this field for almost 7 years. I ask this question because we have some very new techniques that need to be thoroughly tested and vetted before publication. I tried searching for common security tests but most scholarly sources tell you "it's secure when the community can't break it." I am looking for any/every way to prove this process. |
|
Jul 18 |
asked | Tactics available to help prove security of a new system? |
|
Jul 15 |
awarded | Critic |
|
Jul 14 |
awarded | Quorum |
|
Jul 12 |
awarded | Supporter |
|
Jul 12 |
awarded | Scholar |
|
Jul 12 |
accepted | How can a random salt for a hash function work in practice? |
|
Jul 12 |
comment |
How can a random salt for a hash function work in practice? Ah, I see what you mean about not allowing attackers to use pre-computed easy hashes. After seeing so many Sony releases, I see where salt would have saved them from a lot of shame. I'll learn from their mistakes (and your answer/comments) |
|
Jul 12 |
comment |
How can a random salt for a hash function work in practice? The only way an attacker would see the hash (ideally) is if they obtain a database dump. That dump would contain the salt... Don't you want to keep the two pretty far apart? Putting the salt right there with the hash is almost like storing decryptable data with half of the key used to encrypt it, in my opinion. |
|
Jul 12 |
awarded | Student |
|
Jul 12 |
asked | How can a random salt for a hash function work in practice? |
|
Jul 12 |
awarded | Autobiographer |
