Stack Exchange

Royce Williams

Anchorage, AK

http://www.techsolvency.com/roycewilliams/

Just doing my undue diligence. InfoSec demi-boffin, password-cracking enthusiast, and member of Team Hashcat.
Twitter: @TychoTithonus | Keybase: royce |
GitHub: roycewilliams | hashcat forum: royce |
Freenode: tychotithonus | more

top accounts reputation activity subscriptions
Top Questions
Top Answers
127
Is a redirect showing the password in plain text a security vulnerability?
security.stackexchange.com

92
Is bcrypt(strtolower(hex(md5(pass)))) ok for storing passwords?
security.stackexchange.com

48
Which password policy is more secure: one password of length 9 vs. two passwords each of length 8?
security.stackexchange.com

47
How to view Internet Explorer auto-detected proxy settings?
superuser.com

35
Why is the maximum length of OpenWrt’s root password 8 characters?
serverfault.com

31
After a password leak, is there a Levenshtein distance from which one a newly derivated password can be considered safe?
security.stackexchange.com

30
Is it better to use an unsuitable hashing algorithm instead of none at all?
security.stackexchange.com

24
Is it possible to find out the hosts in the known_hosts file?
unix.stackexchange.com

23
nodejs - how to compare two hashes password of bcrypt
stackoverflow.com

23
How secure is BCRYPT(SHA1(Password))
security.stackexchange.com

21
How long would it take to brute force an 11 character single-case alphanumeric password?
security.stackexchange.com

20
Strength of passwords with patterns
security.stackexchange.com

18
Heartbleed: how to reliably and portably check the OpenSSL version?
serverfault.com

17
Why use entropy at all in considering password strength?
security.stackexchange.com

16
Web site kills hard disk I/O, how to prevent?
serverfault.com

14
How to strike a balance between security policies and practical implementation challenges?
security.stackexchange.com

14
Why do salts for hashing passwords need to be globally unique, not just system/site-unique?
security.stackexchange.com

14
How do I change to the noop scheduler?
askubuntu.com

13
Argon2 vs SHA-512, what's better in my case?
security.stackexchange.com

12
Is it safe to store a password using a secure hash followed by an insecure hash?
security.stackexchange.com

12
Why would password managers provide support for OTP codes?
security.stackexchange.com

10
Open a pdf with blank password with pdftk
stackoverflow.com

10
Why the most common prefix of hashed (SHA1) passwords is "00000"?
stackoverflow.com

10
Which is faster - brute-forcing, or using a dictionary attack that contains all possible permutations?
security.stackexchange.com

9
Enable Keep-Alive (Page Speed)
stackoverflow.com

9
How many attempts per second can a password cracker actually make?
stackoverflow.com

9
What are some tips for working with inaccessible power receptacles?
diy.stackexchange.com

9
What vulnerabilities could be caused by a wildcard SSL cert?
security.stackexchange.com

9
hashcat - is there a way to set minimum password length?
security.stackexchange.com

9
Find salt from md5 hash if password is known
security.stackexchange.com

1 2 3