Reputation
10,508
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
2 17 61
Newest
 Announcer
Impact
~614k people reached

2d
comment How to identify a company's public network address range?
Downvoter: it'd be most helpful to tell me what is wrong so I can improve this post and do better next times.
Feb
7
comment While working from home, is it a bad idea to give the company you work for your IP address?
@ChrisCirefice See security.stackexchange.com/q/35160/10863 for the generic question. The answers are a bit specific, but the question is there.
Feb
7
answered How to identify a company's public network address range?
Feb
7
comment how to AES cipher?
That's oddly specific, as if you're trying to decrypt something you intercepted from someone...
Feb
4
comment How trustworthy is Firefox?
Just to be clear, you are talking about the Sync feature of Firefox? Or merely the offline password storage when using a master password?
Jan
16
answered MySQL user passwords in PHP
Jan
9
answered Parameters for PBKDF2 for password hashing
Jan
9
comment How secure is WD MyPassport lock
Regarding "When the user changes his password, K is decrypted with the old password and re-encrypted with the new." (and the rest of that paragraph): is there actually a name for this scheme? I refer to it now and then but end up explaining it over and over.
Dec
3
reviewed Leave Open Someone tried to log into my mail - what do I do?
Dec
2
awarded  Announcer
Nov
29
comment Spoofing IP address as being local over the Internet
But ISPs are, for example.
Nov
29
comment Spoofing IP address as being local over the Internet
@ash More or less, but there is a big difference between, say, "basically it's never done" and "near universal in the western world". I don't know which of the two it is and it's pretty easy to distinguish between the former and the latter, even if all you have is personal accounts. That's what I'm after. And you could say the same for a thousand other questions, like "why do some websites only allow short passwords" (or something like that is one of the more popular questions on this site). I could perhaps rephrase my question to "why doesn't everyone" to make it more objective...
Nov
29
comment Spoofing IP address as being local over the Internet
Well they do the same with filtering port 25 or something, it's just checking a few bytes with hardly any conditionals or other complexity. But anyway, your point is that they don't for performance reasons, thus RFC1918 @IPs will typically arrive just fine if it's not filtered by the destination network or host?
Nov
29
comment Spoofing IP address as being local over the Internet
Well the edge routers at my ISP certainly have an inside and outside, but more importantly, no ISP routers nor any Internet core routers should ever see any RFC1918 addresses... right? Or am I missing something?
Nov
28
reviewed Reject Does a Smartphone contain all the essential properties of a Smartcard? If not, what is missing?
Nov
28
comment Spoofing IP address as being local over the Internet
I assume "@IP" is shorthand for "IP address" or something? And you only mention ingress filtering, but what about egress filtering by my ISP or other core Internet routers? That is also part of the answer to the question whether it'll arrive on the other end.
Nov
28
awarded  Reviewer
Nov
28
reviewed Approve Using SSLStrip, password is still encrypted
Nov
28
asked Spoofing IP address as being local over the Internet
Nov
27
reviewed Approve How can I validate the authenticity of SSL certificates when Blue Coat is used?