5,692 reputation
21044
bio website lucb1e.com
location The Netherlands
age
visits member for 1 year, 9 months
seen 2 hours ago

Software Engineering student. Also interested in computer networking and security. For contact info, see lucb1e.com/!about


Jul
29
comment Why aren't application downloads routinely done over HTTPS?
@DamonGant Oh of course, ssl is broken when you don't either type https:// or verify that it's secure (padlock). Still, I think Twitter can be assumed to be a reasonably secure way of distributing checksums. And if you're smart enough to run checksums, you're probably also smart enough to make sure your connection to Twitter is secure.
Jul
28
comment A DDOS attack by uploading a few hundred large files - whats stopping anybody?
@coderSam Ah okay, then I misunderstood! That sounds like it's at least on-topic here.
Jul
28
comment Speed of key generation - Is old hardware safer?
@TerryChia But would we still call them competent then?
Jul
28
comment A DDOS attack by uploading a few hundred large files - whats stopping anybody?
I think the question if off-topic here. It's a very simple math formula how many clients can upload data to you at the same time, so the question is how to write code (or configure your servers) such that the system throttles clients when there is too much data. I think this question is more fit for StackOverflow (if you want to solve it with code) or Serverfault (if you want to solve it with configuration).
Jul
27
accepted What's this kind of authentication scheme called?
Jul
27
asked What's this kind of authentication scheme called?
Jul
26
comment Why aren't application downloads routinely done over HTTPS?
@DamonGant What do you mean "that includes twitter"? Manually going to twitter.com in a private navigation window (no cookies or other cache) automatically redirects me to https (which is TLS, as I guess you know). And the browser checks the certificate's signature. So I don't understand what you mean.
Jul
21
reviewed Close Ways to protect source code from theft
Jul
21
comment Ways to protect source code from theft
I find this question valid (it's being voted to be closed as "unclear what you're asking"), but it sounds very similar to this one: security.stackexchange.com/questions/17276/…. There it's about any data, but source code is also private data really.
Jul
18
awarded  Synonymizer
Jul
13
revised Exploiting HTTP content in HTTPS page
added 547 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 965 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 439 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 1574 characters in body
Jul
13
revised Exploiting HTTP content in HTTPS page
added 1173 characters in body
Jul
13
answered Exploiting HTTP content in HTTPS page
Jul
13
comment Exploiting HTTP content in HTTPS page
@Close voters: If this is too broad then "How does SSL work" should be removed from this website right now. Another close vote type might be applicable, but I don't think the question is too broad.
Jul
13
reviewed Leave Open Exploiting HTTP content in HTTPS page
Jul
13
reviewed Close Which IP address in email headers is the sender's?
Jul
13
comment Is it possible to set up my own VPN using an ISP without having to open a 3rd party VPN account?
I don't understand your question, but I don't know what to ask really, it's rather vague... Like aRun said, what cloud do you even mean? And why would you even need your ISPs permission/cooperation to connect to that VPN?