6,272 reputation
21146
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 1 month
seen 9 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


May
27
awarded  Informed
May
26
awarded  Analytical
May
26
awarded  Autobiographer
May
25
awarded  Nice Answer
May
25
comment How can a website find my real IP address while I'm behind a proxy?
For more fun, set your X-Forwarded-For header to '"\-- and watch how many websites break down. Youtube broke, but they fixed it the same evening when I mailed them (not that they told me this). Even a website about SSL certificates outputted the MySQL error, practically instructing me how to perform the SQL-injection. Many other websites told me "Your IP address ('"\--) will be logged when you register." Whatismyip.com doesn't actually detect a proxy, even with the x-forwarded-for header set. It might be a combination of things.
May
24
answered IMG tag vulnerability
May
21
awarded  Custodian
May
21
reviewed Reopen How was Lulzsec caught?
May
21
reviewed Close How to allow only some specific computer systems to access website?
May
21
reviewed Leave Open Can Windows 7 hibernation files be recovered?
May
21
reviewed Leave Open Considerations for information exchange agreement between governmental agencies
May
19
comment Known plaintext; What cipher is being used here?
For all we know, it could be a one-time pad. A good cipher should produce output indistinguishable from random data, so if it's something good, we don't have any way of telling what this is. The only real clue you gave is the default output format that it uses (or I guess that's what it's formatted in) and that input and output are the same length (which still can be almost anything).
May
17
reviewed Leave Open Does escaping quotes protect me from SQL injection?
May
17
awarded  Announcer
May
17
comment Touch Screen Password Guessing by Fingerprint Trace
I have seen this as well, it's rather common!
May
17
comment Touch Screen Password Guessing by Fingerprint Trace
@RoryAlsop Same here. I can't recite many passwords, or even recognize them from sight. Muscle memory all the way. Seeing them for the first time is like "Oh so that's what kept my account safe over the past months... wait quickly get it off the screen before I remember it!"
May
16
comment Touch Screen Password Guessing by Fingerprint Trace
"90 percent", that's worrying. And interesting: it also means that most people's patterns are probably not very complex and thus bruteforceable.
May
15
comment Tools to extract code comments from sites?
@D3C4FF English is part of the Burp Suite. Edit: ok not the smartest response. What I really mean is that something being part of a security suite doesn't make any random subject related to security when it should, in my opinion, be a SO or SU question.
May
15
comment Tools to extract code comments from sites?
I think it's not very security related. Your intended purpose maybe, but extracting comments in itself would be a stackoverflow question (or perhaps a superuser one, but I don't think it takes an entire tool as Adnan showed with his regex).
May
12
comment Pronounceable Password Generator
@SimonLehmann Very true, hadn't thought of that. Indeed the meaning of a word can make one remember synonyms instead... I personally use random passwords, but a password's strength is really in their length so I should switch.