6,392 reputation
21147
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 1 month
seen 22 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Jul
21
comment Ways to protect source code from theft
I find this question valid (it's being voted to be closed as "unclear what you're asking"), but it sounds very similar to this one: security.stackexchange.com/questions/17276/…. There it's about any data, but source code is also private data really.
Jul
18
awarded  Synonymizer
Jul
13
revised Exploiting HTTP content in HTTPS page
added 547 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 965 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 439 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 1574 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 1173 characters in body
Jul
13
answered Exploiting HTTP content in HTTPS page
Jul
13
comment Exploiting HTTP content in HTTPS page
@Close voters: If this is too broad then "How does SSL work" should be removed from this website right now. Another close vote type might be applicable, but I don't think the question is too broad.
Jul
13
reviewed Leave Open Exploiting HTTP content in HTTPS page
Jul
13
reviewed Close Which IP address in email headers is the sender's?
Jul
13
comment Is it possible to set up my own VPN using an ISP without having to open a 3rd party VPN account?
I don't understand your question, but I don't know what to ask really, it's rather vague... Like aRun said, what cloud do you even mean? And why would you even need your ISPs permission/cooperation to connect to that VPN?
Jul
10
comment Is there a security reason for a site to limit the number of times a user can change their password?
@TobiasKienzler What does that have to do with this?
Jul
10
comment Is there a security reason for a site to limit the number of times a user can change their password?
Well I guess there is no point in commenting this here, but limits like these are just so annoying. In general I'm very much for burst rates: let the user change the password three times in 72 hours. You can't get back to the original any faster than you can with 1/24h, but at least you can correct something if you've made a mistake (capslock on or whatever)...
Jul
10
comment Is there a tool to verify browser TLS/SSL configuration
@dfc From the speed and number of requests the browser makes, I'd guess that the info is what the browser sends upon connecting. The browser tells the server "hey I wanna setup SSL/TLS and support the following: x, y, z. What's it gonna be?" This website then displays back to you what the browser offered to use. So it's not "only those that the server probed for" but the other way around. See also the second sentence of the "high level description" in this post of mine: security.stackexchange.com/a/20833/10863
Jul
4
comment Security of remailers
It sounds like you're asking this to confirm something else that you want to know. What is the purpose behind your question? Edit: As a basic answer: no, not when the source is actually an intermediary who is not disclosing the real source.
Jul
4
revised Reversing Password Hashes
added 308 characters in body
Jul
4
answered Reversing Password Hashes
Jul
3
comment Besides IP addresses, how else could one be identified?
Someone's face? Really, you gotta be more clear in what situation you're imagining. I'd assume something online since you're talking about an IP address, but even then you might be talking about website visitors, someone who stole your computer, or an attack on your website with a DNS amplification attack, to name just a few.
Jul
2
comment What is the difference between https://google.com and https://encrypted.google.com?
@KonradRudolph As an example, yesterday I looked at the referring sites from a website I maintain and found some things I hadn't expected people to search for. Knowing those (one example search was "harbor roermond", in Dutch) we can optimize the website so that we can be found more easily; we weren't the top hit while some above us were useless linkspam. I myself never did it, but even if this was only to make money, then even in that case the user might profit from it. But this could become a very long discussion. Feel free to ping me in the DMZ or another room if you want to discuss it ;)