8,759 reputation
21457
bio website
location The Netherlands
age
visits member for 3 years
seen 12 mins ago

Student; manufactured 2 decades ago; interested in computer security and software engineering.


May
8
revised Does escaping quotes protect me from SQL injection?
Please use example.com as the example domain
May
8
reviewed Leave Open Does escaping quotes protect me from SQL injection?
May
8
awarded  Announcer
May
7
comment Filtering In Iran
@Adnan But proxies wouldn't get them arrested?
May
7
revised How to encrypt data on the server?
Fixed formatting and some sentences; added linux tag
May
7
comment VCS to manipulate returned trees to prevent leaks?
@John "Nobody wants to lose their house in a lawsuit ;)" And then how exactly do you track down who leaked the code and needs to loose their house? That's what this question is about.
May
7
reviewed Leave Open VCS to manipulate returned trees to prevent leaks?
May
2
comment How do proxy servers sniff data?
Could you elaborate on what happens when a rogue CA is installed by the sysadmins? For example do EV certificates still show as EV, and is it always possible to see the rogue CA on top of the certification path? There is a rogue CA here, but they don't seem to be using it right now (I make sure the EV cert shows whenever I log in).
May
1
comment How do proxy servers sniff data?
I knew I should look out for "mai1.google.com", but that Cryllic "a" just looks entirely the same. This is scary. How about stаckexchange.com (note the cryllic "а" in there), can you register a domain like that too? Or does it work on subdomains only? I wonder because the top- and second-level domains are not under your control, but the subdomain(s) can be used without registration and managed by your own nameservers.
Apr
28
reviewed Approve What's the rationale behind Ctrl-Alt-Del for login
Apr
27
reviewed Leave Open Configure SSL Mutual (Two-way) Authentication
Apr
27
reviewed Close Filehosting - Malicious or not?
Apr
25
reviewed Close What are the valid characters which can be present in a session ID [can it have spaces]
Apr
25
reviewed Close How large RSA-keys could the worlds combined computer power factorize in reasonable time?
Apr
24
reviewed Leave Open Is there any SQL injection for this PHP login example?
Apr
24
reviewed No Action Needed Is there any security threat with open WiFi connection?
Apr
23
awarded  Excavator
Apr
23
comment How can browser select suggestions for my private searches?
@ewanm89 Yeah that's what I meant by "and the fact that you have JS disabled"; that also is a parameter that could be tracked.
Apr
23
comment How can browser select suggestions for my private searches?
@AJHenderson Usually disabling Javascript makes you pretty much indistinguishable besides your IP and user agent string. And the fact that you have JS disabled. My linux computer is pretty distinct on our family connection for 4 people.
Apr
23
comment How can browser select suggestions for my private searches?
"If you are truly clearing all the local records when you close the browser, are not logged in to any accounts and are connecting through a VPN, then there should be no way for a web server to recognize you between visits." Basically you are right, but practically it's a different story: panopticlick.eff.org