7,147 reputation
21250
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 3 months
seen 5 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Sep
10
answered Verify a user's affiliation with an organization
Sep
10
comment Verify a user's affiliation with an organization
Use another TicketSellingCorp. They clearly have no clue about security and no interest in protecting your users.
Sep
9
accepted Why is RFC4255 (SSHFP) not used for https?
Sep
7
asked Is there any risk in allowing more more failed login attempts before autobanning for a longer time?
Sep
2
comment Does using Google DNS make extensions like AdBlock Plus useless?
Third point: Just get rid of annoying ads. I don't really care that much about speeding up browsing or avoiding user tracking. Well I do care, but I don't have AdBlock Plus for that purpose.
Sep
1
revised IMG tag vulnerability
Corrected a mistake
Aug
27
comment Why is RFC4255 (SSHFP) not used for https?
Thanks for the elaborate answer! "The current CA system works." I agree, but then why are we implementing totally useless (unauthenticated) encryption into http2.0? According to the IETF (and I agree with this part), because we need to make deployment easier. Admins don't feel like spending money on or even ordering a certificate when it's not really required. But since you named no real vulnerabilities in this scheme, I guess cert fingerprints in DNS could be part of http2.0 to make the encryption have any use beyond obscurity. Perhaps no padlock, but at least it'd be worth something.
Aug
27
asked Why is RFC4255 (SSHFP) not used for https?
Aug
26
comment How to attract hackers?
Just say "this is unhackable" and post it on hackernews. No more needs be done, you don't even need to offer prize money or anything ;)
Aug
23
comment IP address of an iPhone
+1 for mentioning the police up front. In The Netherlands, that would be 1 CIOT lookup and they'd know the name and address of the person owning it. That doesn't mean this person did it, but that's already more than you could do yourself.
Aug
23
comment Strategies against jamming attacks?
I say we take off and nuke the jammer from orbit. It’s the only way to be sure.
Aug
21
comment How can I prevent tracking by ETAGs?
Most of this was copied from lucb1e.com/rp/cookielesscookies (legally because it's WTFPL, but it's still mostly just a copy). Also it's recommended to include more details in an answer than merely a link, and you should disclose any affiliation with any website (if applicable).
Aug
21
comment How can I prevent tracking by ETAGs?
Shameless plug, I also made an info page about this: lucb1e.com/rp/cookielesscookies Includes demonstration and source code.
Aug
15
comment How does “check.torproject.org.” know if you're using TOR?
Yup I just tried this: When running an exit node myself, I can go to check.torproject.org in any unconfigured browser and it will happily report I'm using Tor.
Aug
11
revised Is there an alternative to TCP/IP that encrypts end-to-end?
Added privacy tag
Aug
11
revised Is there an alternative to TCP/IP that encrypts end-to-end?
added 58 characters in body
Aug
11
answered Is there an alternative to TCP/IP that encrypts end-to-end?
Aug
11
comment Is Windows BitLocker secure?
@astralbanana What makes you believe Truecrypt is better? The Linux kernel itself had backdooring potential with the RdRand code that Linus Torvalds included.
Aug
7
revised Does Chrome OS Allow Executable Files?
added 131 characters in body
Aug
7
comment Does Chrome OS Allow Executable Files?
@rakslice Okay, fair point. I've slightly edited my post.