meta user
network profile
| bio | website | lucb1e.com |
|---|---|---|
| location | The Netherlands | |
| age | ||
| visits | member for | 11 months |
| seen | 19 mins ago | |
| stats | profile views | 211 |
Application development student. Also interested in computer networking and security. See also: lucb1e.com/!about
|
Mar 1 |
comment |
Credit card forms on HTTP pages a MITM risk? Financial data on non-https? I just swallowed an apple whole :| |
|
Feb 20 |
comment |
Database hardening techniques I think this applies for most databases: Q: MySQL Server Hardening |
|
Feb 1 |
comment |
can I find on which machine was a zipped archive created? Perhaps it's an idea to look at the file modification times on machine A, B, and the ones in the zip file. |
|
Jan 30 |
comment |
How to correctly implement AES in a backup application Thanks for your answer. It's clear by now, also with the other answer, that I shouldn't implement all of this myself. But where could I find existing implementations, and how do I know they're secure and well-tested? |
|
Jan 28 |
comment |
How to correctly implement AES in a backup application Thanks for your answer! I'm new to implementing encryption. What could I google for when looking for an existing, well tested and reviewed solution that allows me to practically encrypt(data, password)? Or perhaps a bit more complicated to provide integrity checking, but you get the idea. |
|
Jan 27 |
revised |
How to correctly implement AES in a backup application added 83 characters in body |
|
Jan 27 |
asked | How to correctly implement AES in a backup application |
|
Jan 23 |
comment |
Is there a true alternative to using CAPTCHA images? Do you mean "CAPTCHAs" as in "CAPTCHA images"? Because it stands for Completely Automated Public Turing test to tell Computers and Humans Apart. Anything that tells automated requests from manual ones is a CAPTCHA, thus you're not going to find alternatives for it. But there might be alternatives to CAPTCHA images. Is that what you mean? |
|
Jan 10 |
answered | Should I change the private key when renewing a certificate? |
|
Jan 5 |
answered | IE on Windows 2012 doesn't show certificate or lock icon despite using HTTPS |
|
Jan 1 |
comment |
Strongest cryptographic algorithm available in PHP 5.3 @CodesInChaos Hmm interesting. Sounds like something to explain in an answer? :) |
|
Jan 1 |
comment |
Why CAs instead of global fingerprint database? @User145678 Yes, every website does need one. If only the private data is encrypted, encryption becomes suspicious. Privacy is becoming more and more of an issue. But this is besides the point. Even if there were only 1 million fingerprints, that would mean close to 3000 updates every day, assuming an even distribution. The solution is delaying updates, but I wouldn't want to have to wait a month to get my webshop https-enabled. |
|
Jan 1 |
comment |
Strongest cryptographic algorithm available in PHP 5.3 @CodesInChaos If you simply encrypt something with AES I don't see how you could break it. Also, why the HMAC-SHA2? |
|
Jan 1 |
comment |
Strongest cryptographic algorithm available in PHP 5.3 A bit of googling can do magic: "cryprographic function in php" First hit is php.net/crypto which seems to be exactly what you're looking for. As for "What's the strongest" - just go with something normal like AES or RC4. |
|
Jan 1 |
comment |
Security of NoSQL databases Great question! I edited the title from "non-relational" to "NoSQL". In your post you mentioned NoSQL specifically, but non-relational can also mean something like Spanner or perhaps something that I don't know of. I assumed the change was okay, just revert my changes if it's not! Note that there is also a NoSQL tag. The questions tagged NoSQL seem to be specifically about MongoDB, so I think your question is not a duplicate. |
|
Jan 1 |
revised |
Security of NoSQL databases Changed "non-relational databases" to "nosql databases" |
|
Dec 25 |
comment |
Which Wifi encryption method is secure? +1 for mentioning WPS |
|
Dec 18 |
revised |
Steganalysis of outgoing traffic edited tags |
|
Dec 18 |
comment |
Steganalysis of outgoing traffic Not that I know of, but it doesn't sound very hard to do. There are plenty command-line tools which analyse images for steganography. |
|
Dec 15 |
revised |
Key management scheme in PHP that is compliant with NIST SP 800-57 Improved title; added php tag |
