7,436 reputation
21250
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 5 months
seen 6 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Oct
16
revised WiFi connection history
added 287 characters in body
Oct
16
answered Is the option to jump to blanks in password fields a security risk?
Oct
16
answered WiFi connection history
Oct
16
reviewed Approve suggested edit on How nmap guesses the operating system?
Oct
16
reviewed Approve suggested edit on SSL3 “POODLE” Vulnerability
Oct
15
comment Password recovery flow - Send Password recovery to any email?
So entering a non-registered email address would create an account for them automatically? It's sort of odd and you may want to consider whether users understand what is going on. Also, I could send lots of emails with useless links to people that never signed up for your website. Then again, you can do that with most register forms, but it's something to think about.
Oct
15
answered How to explain to a customer that spamfilters don't catch everything
Oct
15
comment How does SSL/TLS work?
@MuhammadUmer Wish we'd get something interesting like this at school. We got one lecture with some encryption basics and even there I had to correct the teacher a few times... so that was useless... Keep on googling and never let school interfere with your education :) (Quote from Mark Twain.)
Oct
14
reviewed Reject suggested edit on How can attackers bypass firewalls?
Oct
14
reviewed Approve suggested edit on I need help on how to hack into a scammer computer via IP/DNS
Oct
13
awarded  Good Answer
Oct
12
reviewed Approve suggested edit on How can security audits be integrated into an agile project?
Oct
11
awarded  Announcer
Oct
11
revised Is an 80 bit password good enough for all practical purposes?
Worked emory and JS.'s comments into the post.
Oct
11
comment Is an 80 bit password good enough for all practical purposes?
@emory Responding to your first comment: good point. We shouldn't blindly trust a service to be perfectly secure. I still think it's okay to slack a little bit and use a weaker password on big services (as long as it's not crackable within 5 minutes with some serious power, probably nobody is going to bother when they got 90 million other passwords to try), but I think your main point is valid.
Oct
10
revised Is an 80 bit password good enough for all practical purposes?
Added more details to final paragraph as per Hagen von Eitzen's comment. Not sure if serious but just in case...
Oct
10
comment Is an 80 bit password good enough for all practical purposes?
@psusi The first point is probably valid, but I have yet to hear that Moore's law is completely dead. Citation needed, I suppose. About your second argument: when writing the post I doubted to include the phrase "for the same amount of money" but decided to leave it out because it seemed obvious to me. The point is that not everyone has the money to buy four times as much calculation power as they already have. Else why bother inventing faster CPUs when could buy more CPUs instead?
Oct
10
awarded  Nice Answer
Oct
10
comment Is an 80 bit password good enough for all practical purposes?
@Peter Dice, good one! I knew about diceware, but you're the first person I hear who actually uses it :)
Oct
10
revised Is an 80 bit password good enough for all practical purposes?
added 122 characters in body