8,479 reputation
21355
bio website
location The Netherlands
age
visits member for 2 years, 11 months
seen 23 hours ago

Student; manufactured 2 decades ago; interested in computer security and software engineering.


Aug
24
reviewed Approve Why is “www.” considered unsafe in this HTTPS URL?
Aug
22
reviewed Approve How should I store and secure self-signed certificates?
Aug
21
comment Hackers attack against wp-config.php
@JaneBrye in that case I think someone might be abusing your hosting account for spam or DDoS attacks or something. Without more details I can't really say anything, but one way to stop it is change hosting and do a fresh Wordpress install. Or have someone look at it.. perhaps the hosting company can look through logs? It's in their interest not to end up on blacklists.
Aug
21
comment What sensitive information can be leaked in a Vim's swap file?
Hmm, good point. I edit stuff on a live website with vim, but never thought about the swp files that might leak parts of the content... The odds are low that someone will try whether the swp file is present right at the moment when I'm editing, but it's a good point nevertheless.
Aug
21
comment how to wipe RAM in Windows 7
"(hardcore overclocker, perhaps?)" Or the FBI ;)
Aug
21
answered How secure are sentence passwords?
Aug
21
comment Should expired compromised certificates be taken care of if the time is always correct?
"It's your server that should check the validity of the certificate not the web client." I think this is the most important remark here. The server is something you control and which usually has a somewhat-correct time (not off by weeks at least).
Aug
21
revised Hackers attack against wp-config.php
added 3 characters in body
Aug
21
answered Hackers attack against wp-config.php
Aug
17
answered Why do we use such a redundant language (English) for network communication?
Aug
15
reviewed Approve possible to exchange public and private exponent in RSA?
Aug
13
comment Can my workplace view my Tor traffic?
"just connecting to the network" won't allow them to run code on your computer. That's what we call an RCE and is considered a security vulnerability if software allows it. Sysadmins can only run scripts on Windows remotely because the system was connected to the active directory by an administrator earlier; you can't just run code on anyone connected to your WiFi network. That would be, well, either lots of fun or hell, depending on which end you're on.
Aug
13
comment Can my workplace view my Tor traffic?
@Taemyr "If only suspicious activity is private, privacy becomes suspicious."
Aug
12
reviewed Approve Where do I find JavaScript malware?
Aug
12
comment What Twitter #hashtags apply to IT Security
I would personally go with #infosec instead, much shorter (stupid twitter character limit) and everyone in the industry knows it.
Aug
9
reviewed Reject How to prevent BadUSB attacks on linux desktop
Aug
9
comment How to prevent BadUSB attacks on linux desktop
@user53541 tried to comment but can't due to reputation limit so he had to resort to editing to talk to us. Rejected edit, but adding comment for him: "It can't work to authorize device using interface class number, the interface device will not be created if the device is not authorized."
Aug
7
awarded  Proofreader
Aug
7
reviewed Approve Testing Malware in one Virtual Machine which is running side by side along with other Virtual Machines
Aug
7
reviewed Approve Is there any hardware solution for IDS?