7,596 reputation
21250
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 5 months
seen 5 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


6h
reviewed Approve Open Problems in Security?
6h
reviewed Approve DNS Cache poisioning examples, or other criteria when a client ignores a response
6h
reviewed Approve What regulations *require* multi-factor authentication?
6h
reviewed Approve Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)
6h
reviewed Approve OWA Keep-Alive in http, even though it should be forced https
6h
reviewed Approve How can I find the process that is trying to use smtp to send email?
6h
reviewed Approve How does DNSSec work? Are there known limitations or issues?
Dec
14
reviewed Approve differences between various screen sharing/remote desktop access softwares
Dec
14
reviewed Approve How can someone go off-web, and anonymise themselves after a life online?
Dec
10
reviewed Approve Server sends RST during TLS handshake. Why?
Dec
7
reviewed Approve How to know what others browse through the network?
Dec
4
reviewed Approve What to do about ssh breakin attempts
Dec
2
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
I'm sure this is all technically true, but talking about your self-invented 5 tiers of security does not answer the question. And disclosure would be used when you are a certificate reseller, not when you (like most of the people here I think) got a website with a (hopefully signed) certificate.
Dec
2
revised Do I need a salt when hashing a randomly generated password?
You hash the output of a CSPRNG. It's very confusing to say you hash a CSPRNG or that your password "is" CSPRNG.
Dec
1
reviewed Approve What is SHA-3 and why did we change it?
Dec
1
reviewed Approve Can bankers' rounding be exploited to maliciously increase balances?
Nov
29
reviewed Approve Techniques to make a login page safe without using SSL
Nov
29
revised Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
Use example.com instead of random domain names...
Nov
29
reviewed Approve Metaploit: Exploits and its relevant payload
Nov
29
reviewed Approve How do you explain to experts that a database server should not reside in the DMZ?