5,692 reputation
21044
bio website lucb1e.com
location The Netherlands
age
visits member for 1 year, 9 months
seen 35 mins ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Mar
28
reviewed Close Changing locks on server cabinet
Mar
28
reviewed Close How to decrypt LDAP passwords Hashed as MD5?
Mar
28
reviewed Leave Open Resources for building a network security curriculum
Mar
28
reviewed Leave Open Why does some popular software still use md5?
Mar
28
reviewed Leave Open Has the WPS brute-force cracking issue been fixed?
Mar
28
reviewed Close Keyloggers and Email Accounts
Mar
28
comment What are the ports used by Online Email Accounts such as Yahoo Mail, Gmail, etc.?
@Matthew Yes, a packet sniffer will be able to pick this up. It might be an encrypted connection though, then you can't read it. The default port for this is 25, but any could theoretically be used. The browser or other programs do not need to be closed (though it helps for inexperienced users to find the packet).
Mar
28
revised What is zero day?
The entire post needn't be a link. It looks weird and it's harder to select text.
Mar
28
comment What is zero day?
@ponsfonze Who says it already has a patch upon releasing it to he public? Hmm actually I think that might be a good way to define when people use the term zero-day: when there is no patch yet (regardless of whether the leak is public).
Mar
28
comment Would it be possible to overload a large part of the internet, and if so then how?
An interesting realization is that, if the internet is down due to an attack, how will it remain down? The attack can't reach the other side of the world because the internet is down. Any attack aiming for this must be highly distributed and autonomous in order to take the internet down entirely.
Mar
28
comment What is zero day?
"A 0-day exploit is a vulnerability not known to the public" New Java or Adobe Reader exploits are always called 0-days even when they're publicized immediately. You're saying this use of the term 0-day is incorrect?
Mar
28
comment What is zero day?
Weren't all vulnerabilities "previously unknown" at some point? Aren't they all zero-days then?
Mar
27
comment Email instead of username
I don't think using the email address as username will significantly increase how many users use the same password on your website as for their email account. Nearly all websites require an email address to be entered anyway.
Mar
27
comment Email instead of username
"the user remembers it;" I use an unique email address for every website this is not at all practical for me. "it is unique worldwide" So is my username, and else I'd choose another. "it can be coupled with an "email verification"" As if websites otherwise won't want my email address. But I'm going offtopic; good post as always.
Mar
27
comment Is it safe to suspend my computer if I'm using encrypted hard drive?
This is a very interesting question: yesterday a tool was announced (YoNTMA) that supposedly protected your pc against theft and cold boot attacks by hibernating when it detected certain things. But during hibernation, the RAM contents are written to the disk, making it even easier to recover the key..? Suspending (or sleeping) and hibernating are different things, but it's related so perhaps it'll answer my question as well.
Mar
25
awarded  Announcer
Mar
25
comment What security purpose do hashes of files serve?
@scai Ok, it just seemed weird to sign a hash but not the software.
Mar
25
comment What security purpose do hashes of files serve?
@scai How's that better than signing the software?
Mar
24
comment Why does some popular software still use md5?
MD5 is 'okay' for checksums; it's still very hard to find a collision and modify the software without modifying the md5 checksum. Unsalted passwords on the other hand...
Mar
20
reviewed Leave Open Stop code injections into page code