7,436 reputation
21250
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 5 months
seen 4 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Apr
7
reviewed Leave Open how malware is added to android app
Apr
7
revised SQL Injection: Drop All Tables
Please use example.com as example domain, and a quote sign is `"` not `'`.
Apr
7
revised SQL Injection: Drop All Tables
Please use example.com as example domain. Other sites are in use.
Apr
7
reviewed Close Does SSL/TLS (https) hide the urls being accessed
Apr
7
reviewed Leave Open rancid like tool for config files
Apr
7
reviewed Leave Open OTR and/or SecureIM library for C# .NET
Apr
7
reviewed Close For a Broker/Dealer, what technology is appropriate to limit transaction to a given state?
Apr
6
comment How does SSL/TLS work?
@Yehosef Good question! I forgot to explain that in my answer. Looking around, it turns out there is actually a question dedicated to this: security.stackexchange.com/q/6290/10863
Apr
5
comment DNS Amplification DDOS attack
*Random idea* What about continuously abusing misconfigured DNS servers against themselves? Then admins are much more likely to notice it, and as a bonus, they have less capacity remaining to attack other websites.
Apr
3
comment Would suggesting a random passphrase during sign-up hurt overall security?
@ chris Good point about suggesting passwords. Not only would this teach users to accept a password chosen for them (though that would be fine when it's done offline, on a website you can't be sure). Another thing is the "security hygiene" you're talking about, I think the phrase you're looking for is that it adds another attack vector (or perhaps multiple). The password is displayed and perhaps even transferred. Plus, ( @gilles ) if there is a wrong way to do something, someone eventually will (i.e. generate a password server-side instead of client-side, then transmit it insecurely).
Apr
2
revised What technical reasons are there to have low maximum password lengths?
One sentence was incoherent
Mar
31
answered What technical reasons are there to have low maximum password lengths?
Mar
29
reviewed No Action Needed What's an easy way to perform a man-in-the-middle attack on SSL?
Mar
29
reviewed Close some questions about DOM based XSS
Mar
28
reviewed Close Changing locks on server cabinet
Mar
28
reviewed Close How to decrypt LDAP passwords Hashed as MD5?
Mar
28
reviewed Leave Open Resources for building a network security curriculum
Mar
28
reviewed Leave Open Why does some popular software still use md5?
Mar
28
reviewed Leave Open Has the WPS brute-force cracking issue been fixed?
Mar
28
reviewed Close Keyloggers and Email Accounts