8,739 reputation
21457
bio website
location The Netherlands
age
visits member for 3 years
seen 15 hours ago

Student; manufactured 2 decades ago; interested in computer security and software engineering.


Dec
10
reviewed Approve Server sends RST during TLS handshake. Why?
Dec
7
reviewed Approve How to know what others browse through the network?
Dec
4
reviewed Approve What to do about ssh breakin attempts
Dec
2
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
I'm sure this is all technically true, but talking about your self-invented 5 tiers of security does not answer the question. And disclosure would be used when you are a certificate reseller, not when you (like most of the people here I think) got a website with a (hopefully signed) certificate.
Dec
2
revised Do I need a salt when hashing a randomly generated password?
You hash the output of a CSPRNG. It's very confusing to say you hash a CSPRNG or that your password "is" CSPRNG.
Dec
1
reviewed Approve What is SHA-3 and why did we change it?
Dec
1
reviewed Approve Can bankers' rounding be exploited to maliciously increase balances?
Nov
29
reviewed Approve Techniques to make a login page safe without using SSL
Nov
29
revised Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
Use example.com instead of random domain names...
Nov
29
reviewed Approve Metaploit: Exploits and its relevant payload
Nov
29
reviewed Approve How do you explain to experts that a database server should not reside in the DMZ?
Nov
28
reviewed Approve Why does my openssl connection fail with elliptic curve cipher ECDH-RSA-AES128-SHA?
Nov
28
reviewed Approve Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them?
Nov
27
reviewed Approve IP address of an iPhone
Nov
26
reviewed Approve How is security of server's RSA private key is ensured?
Nov
26
reviewed Approve Is XSS a server-side or client-side vulnerability?
Nov
23
comment How do major sites prevent DDoS?
@NewWorld Well google for it, it's not hard to find. One example is PayPal (Ebay-owned) being DDoSed by "Anonymous" not too long ago.
Nov
21
reviewed Approve How do major sites prevent DDoS?
Nov
21
comment How do major sites prevent DDoS?
"Have you?" Yes.
Nov
21
reviewed Approve Is storing CVV compliant with PCI standards?