6,292 reputation
21146
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 1 month
seen 5 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Jul
3
comment Besides IP addresses, how else could one be identified?
Someone's face? Really, you gotta be more clear in what situation you're imagining. I'd assume something online since you're talking about an IP address, but even then you might be talking about website visitors, someone who stole your computer, or an attack on your website with a DNS amplification attack, to name just a few.
Jul
2
comment What is the difference between https://google.com and https://encrypted.google.com?
@KonradRudolph As an example, yesterday I looked at the referring sites from a website I maintain and found some things I hadn't expected people to search for. Knowing those (one example search was "harbor roermond", in Dutch) we can optimize the website so that we can be found more easily; we weren't the top hit while some above us were useless linkspam. I myself never did it, but even if this was only to make money, then even in that case the user might profit from it. But this could become a very long discussion. Feel free to ping me in the DMZ or another room if you want to discuss it ;)
Jul
2
comment What is the difference between https://google.com and https://encrypted.google.com?
@KonradRudolph The http referer header is one of the most useful things for webmasters. If you come from a https website it's not sent anyway, so no data is leaked. You may consider enabling it again for our sake.
Jul
2
comment How does YouTube prevent automatic piracy?
It doesn't do it very effectively if anything. See the youtube-dl tool for Linux.
Jun
28
revised House owner can see who's connected to WiFi; what more can he see?
Clarified title, added tags
Jun
25
awarded  Yearling
Jun
23
comment How long is a 2048-bit RSA key?
I meant, explain in your post like others do. The answer should contain the info, not the comments on an answer ;)
Jun
23
comment How long is a 2048-bit RSA key?
Correct answer it seems, but please explain why this formula is correct.
Jun
19
comment How to make / dump contents of memory for forensics analysis?
Isn't the memory stored in hiberfil.sys when you hibernate? You could read that file with a Linux live boot.
Jun
19
awarded  Announcer
Jun
17
comment Backdoors after SQL injection?
Practical example: Some university here left port 80 open for users so that they could host servers there. Someone had an unprotected wamp installation (windows, apache, mysql, php, phpmyadmin), and I was able to compromise his laptop entirely (admin account) by using a simple INTO OUTFILE statement and then calling the php script remotely. LIke Adnan said, without analysis you should assume the worst.
Jun
14
revised Can your Windows or Linux username be exposed to websites?
Added `input type=file` part
Jun
14
comment Can your Windows or Linux username be exposed to websites?
@Strapakowsky Nope, the path is not exposed to Javascript. Maybe some obscure browser, but recent versions of Chrome, Firefox and IE9 only expose the filename, never the path. Or at least, I don't know of any hacks that make it possible.
Jun
13
awarded  Announcer
Jun
10
comment Login system using authenticated encryption without storing user password
Please explain how this question is different from the one you linked about "user authentication by decrypting a random blob". At first glance it looks like an exact duplicate to me.
Jun
10
reviewed No Action Needed What are the implications of including binary blobs in the Linux kernel?
Jun
10
reviewed No Action Needed Login system using authenticated encryption without storing user password
Jun
10
reviewed Leave Open Website URL to point users to in order to “make a point” about security
Jun
10
reviewed Leave Open Flaws in Crypto Cat
Jun
10
reviewed Leave Open Recover Server 2008 R2 Domain Admin Password