Jay Sullivan

Columbus, OH

petio.org

Age: 29

C, C#, Java, JavaScript, PowerShell, Bash, Perl, x86asm, LaTeX, HTML/CSS, Windows, Linux

Apr
3
awarded Notable Question
Mar
29
awarded Popular Question
Mar
27
answered Deleting a row after certain time
Mar
27
comment Is symmetric encryption with one time pre-shared key secure?
+1 "Don't roll your own crypto". And if you really can't use TLS, use something else. There's just no reason to roll your own.
Mar
26
comment Is there a threshold for a password so long it doesn't get any more secure or even becomes insecure?
I agree that 128-bits of entropy is the correct answer, and is "good enough" for all but the most paranoid. However, when quantum computers enter the picture, this is no longer true, due to Grover's algorithm: it forces us to double this number. 256-bits is an even better answer, as it protects against even quantum algorithms.
Feb
17
awarded Notable Question
Feb
7
comment How to checkout only one file from git repository?
I would argue against the statement that git "generates [files] based on the entire history of the project". It is more correct to say that git stores snapshots of the states of files in the form of hash trees. Certainly there is no generating going on.
Feb
3
answered How do I protect static files with ASP.NET form auhentication on IIS 7.5?
Feb
3
revised How do I register multiple paths for a HttpHandler in IIS7?
added missing quote
Jan
22
awarded Yearling
Jan
22
awarded Yearling
Jan
11
awarded Nice Question
Jan
9
comment How can I easily encrypt a file?
@David Forester: it is not enough to say "it uses AES and AES has no known vulnerabilities," because just using AES alone is not enough to password-protect a file securely. The WinZip file format (as you linked) also uses PBKDF2 to generate the AES-128 (or AES-256) key (with 1000 iterations), which is important to protect against brute-force attacks, and HMAC-SHA1-80 (truncated to 80 bits) as a MAC, which is also fairly important to prevent tampering. This isn't the most secure system ever; 1000 iterations isn't seen as especially strong these days, and it only gets worse with time.
Jan
6
awarded Necromancer
Dec
24
comment Need a secure password generator recommendation
@Dave: Because it adds no value to do so. This also means sometimes you're creating a password with 33 bits of security, and sometimes with 82 (assuming this is base-62). Here's a better plan: decide what the maximum password length you're willing to have is, and choose a password with that length, or at least long enough that you get 128-bits of security.
Dec
11
awarded Notable Question
Dec
10
revised byte[] to file in Java
add example
Dec
9
awarded Supporter
Dec
8
comment How to generate a secure random alphanumeric string in Java efficiently?
@Tito: What? How is an attacker going to guess a 128-bit value?
Dec
8
comment Need a secure password generator recommendation
Why is this the top answer? "Don't worry about password security, it's not important." Password security is one of the most abused, misunderstood problems with security today. Please stop spreading stuff like this. Make your passwords secure.
1 2 3 4 5