5,737 reputation
21044
bio website lucb1e.com
location The Netherlands
age
visits member for 1 year, 10 months
seen 51 mins ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Aug
23
comment Strategies against jamming attacks?
I say we take off and nuke the jammer from orbit. It’s the only way to be sure.
Aug
21
comment How can I prevent tracking by ETAGs?
Most of this was copied from lucb1e.com/rp/cookielesscookies (legally because it's WTFPL, but it's still mostly just a copy). Also it's recommended to include more details in an answer than merely a link, and you should disclose any affiliation with any website (if applicable).
Aug
21
comment How can I prevent tracking by ETAGs?
Shameless plug, I also made an info page about this: lucb1e.com/rp/cookielesscookies Includes demonstration and source code.
Aug
15
comment How does “check.torproject.org.” know if you're using TOR?
Yup I just tried this: When running an exit node myself, I can go to check.torproject.org in any unconfigured browser and it will happily report I'm using Tor.
Aug
11
revised Is there an alternative to TCP/IP that encrypts end-to-end?
Added privacy tag
Aug
11
revised Is there an alternative to TCP/IP that encrypts end-to-end?
added 58 characters in body
Aug
11
answered Is there an alternative to TCP/IP that encrypts end-to-end?
Aug
11
comment Is Windows BitLocker secure?
@astralbanana What makes you believe Truecrypt is better? The Linux kernel itself had backdooring potential with the RdRand code that Linus Torvalds included.
Aug
7
revised Does Chrome OS Allow Executable Files?
added 131 characters in body
Aug
7
comment Does Chrome OS Allow Executable Files?
@rakslice Okay, fair point. I've slightly edited my post.
Aug
5
reviewed Leave Open How to expose a client's real IP address?
Jul
30
awarded  Nice Question
Jul
29
comment Why aren't application downloads routinely done over HTTPS?
@DamonGant Oh of course, ssl is broken when you don't either type https:// or verify that it's secure (padlock). Still, I think Twitter can be assumed to be a reasonably secure way of distributing checksums. And if you're smart enough to run checksums, you're probably also smart enough to make sure your connection to Twitter is secure.
Jul
28
comment A DDOS attack by uploading a few hundred large files - whats stopping anybody?
@coderSam Ah okay, then I misunderstood! That sounds like it's at least on-topic here.
Jul
28
comment Speed of key generation - Is old hardware safer?
@TerryChia But would we still call them competent then?
Jul
28
comment A DDOS attack by uploading a few hundred large files - whats stopping anybody?
I think the question if off-topic here. It's a very simple math formula how many clients can upload data to you at the same time, so the question is how to write code (or configure your servers) such that the system throttles clients when there is too much data. I think this question is more fit for StackOverflow (if you want to solve it with code) or Serverfault (if you want to solve it with configuration).
Jul
27
accepted What's this kind of authentication scheme called?
Jul
27
asked What's this kind of authentication scheme called?
Jul
26
comment Why aren't application downloads routinely done over HTTPS?
@DamonGant What do you mean "that includes twitter"? Manually going to twitter.com in a private navigation window (no cookies or other cache) automatically redirects me to https (which is TLS, as I guess you know). And the browser checks the certificate's signature. So I don't understand what you mean.
Jul
21
reviewed Close Ways to protect source code from theft