8,469 reputation
21355
bio website
location The Netherlands
age
visits member for 2 years, 11 months
seen 3 hours ago

Student; manufactured 2 decades ago; interested in computer security and software engineering.


Dec
20
reviewed Approve Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)
Dec
20
reviewed Approve OWA Keep-Alive in http, even though it should be forced https
Dec
20
reviewed Approve How can I find the process that is trying to use smtp to send email?
Dec
20
reviewed Approve How does DNSSec work? Are there known limitations or issues?
Dec
14
reviewed Approve How can someone go off-web, and anonymise themselves after a life online?
Dec
10
reviewed Approve Server sends RST during TLS handshake. Why?
Dec
7
reviewed Approve How to know what others browse through the network?
Dec
4
reviewed Approve What to do about ssh breakin attempts
Dec
2
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
I'm sure this is all technically true, but talking about your self-invented 5 tiers of security does not answer the question. And disclosure would be used when you are a certificate reseller, not when you (like most of the people here I think) got a website with a (hopefully signed) certificate.
Dec
2
revised Do I need a salt when hashing a randomly generated password?
You hash the output of a CSPRNG. It's very confusing to say you hash a CSPRNG or that your password "is" CSPRNG.
Dec
1
reviewed Approve What is SHA-3 and why did we change it?
Dec
1
reviewed Approve Can bankers' rounding be exploited to maliciously increase balances?
Nov
29
reviewed Approve Techniques to make a login page safe without using SSL
Nov
29
revised Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
Use example.com instead of random domain names...
Nov
29
reviewed Approve Metaploit: Exploits and its relevant payload
Nov
29
reviewed Approve How do you explain to experts that a database server should not reside in the DMZ?
Nov
28
reviewed Approve Why does my openssl connection fail with elliptic curve cipher ECDH-RSA-AES128-SHA?
Nov
28
reviewed Approve Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them?
Nov
27
reviewed Approve IP address of an iPhone
Nov
26
reviewed Approve How is security of server's RSA private key is ensured?