Luc

3,361 reputation

2832

bio	website	lucb1e.com
	location	The Netherlands
	age
visits	member for	10 months
	seen	14 hours ago
stats	profile views	208

Application development student. Also interested in computer networking and security. See also: lucb1e.com/!about

	3,361 reputation	bio	website	lucb1e.com	visits	member for	10 months
2832 badges		location	The Netherlands		seen	14 hours ago

summary answers questions tags badges favorites bounties reputation activity

443 Actions

suggestions reviews revisions comments badges posts accepts all

14h	reviewed	Leave Open Does escaping quotes protect me from SQL injection?
22h	awarded	Announcer
23h	comment	Touch Screen Password Guessing by Fingerprint Trace I have seen this as well, it's rather common!
23h	comment	Touch Screen Password Guessing by Fingerprint Trace @RoryAlsop Same here. I can't recite many passwords, or even recognize them from sight. Muscle memory all the way. Seeing them for the first time is like "Oh so that's what kept my account safe over the past months... wait quickly get it off the screen before I remember it!"
1d	comment	Touch Screen Password Guessing by Fingerprint Trace "90 percent", that's worrying. And interesting: it also means that most people's patterns are probably not very complex and thus bruteforceable.
2d	comment	Tools to extract code comments from sites? @D3C4FF English is part of the Burp Suite. Edit: ok not the smartest response. What I really mean is that something being part of a security suite doesn't make any random subject related to security when it should, in my opinion, be a SO or SU question.
2d	comment	Tools to extract code comments from sites? I think it's not very security related. Your intended purpose maybe, but extracting comments in itself would be a stackoverflow question (or perhaps a superuser one, but I don't think it takes an entire tool as Adnan showed with his regex).
May 12	comment	Pronounceable Password Generator @SimonLehmann Very true, hadn't thought of that. Indeed the meaning of a word can make one remember synonyms instead... I personally use random passwords, but a password's strength is really in their length so I should switch.
May 8	comment	Should I enforce a password policy on a web site? Especially have a reasonable policy. Anything over 5 characters would be enough in my opinion. If you use the password abcde, that's your own stupid problem when my database gets hacked. I'll implement ratelimiting for login attempts so that you can't hack my service by trying for weak passwords. But I should be able to choose `^[ -~]$` as password which contains neither digits nor lowercase nor uppercase. I think it's stronger than the average "`s3cur3pa$$word`".
May 8	reviewed	Leave Open Android soft keyboard architecture
May 8	revised	Does escaping quotes protect me from SQL injection? Please use example.com as the example domain
May 8	reviewed	Leave Open Does escaping quotes protect me from SQL injection?
May 8	awarded	Announcer
May 7	comment	Filtering In Iran @Adnan But proxies wouldn't get them arrested?
May 7	revised	How to encrypt data on the server? Fixed formatting and some sentences; added linux tag
May 7	comment	VCS to manipulate returned trees to prevent leaks? @John "Nobody wants to lose their house in a lawsuit ;)" And then how exactly do you track down who leaked the code and needs to loose their house? That's what this question is about.
May 7	reviewed	Leave Open VCS to manipulate returned trees to prevent leaks?
May 6	reviewed	Close may DNS companies track visitors by traffic analysis?
May 4	comment	Is publishing your public IP address a security threat? The thirty links in this post make it annoying to read. I think if you link a single instance of CDIR and ASN(s) people would know where to look...
May 2	comment	How proxy servers sniff data Could you elaborate on what happens when a rogue CA is installed by the sysadmins? For example do EV certificates still show as EV, and is it always possible to see the rogue CA on top of the certification path? There is a rogue CA here, but they don't seem to be using it right now (I make sure the EV cert shows whenever I log in).