8,919 reputation
21558
bio website
location The Netherlands
age
visits member for 3 years, 1 month
seen 15 hours ago

Student; manufactured 2 decades ago; interested in computer security and software engineering.


Jul
10
comment How does the password become 30,000 times stronger?
@JekwA Using 7-bit ASCII, I count 127-32=95 printable characters. Minus 10 digits and 52 letters (uppercase and lowercase), you get 33 special characters, which includes space. Excluding space you have 32 special characters. Both get close to 30,000 (one above, one below).
Jul
10
comment How does the password become 30,000 times stronger?
@user80723 No, it's just ones and zeros to the computer. The byte 00111000 (which we read as 8) is the same to a computer as the byte 00100001 (which we read as !).
Jul
1
comment Is writing to /dev/null secure?
@ott-- sure, though it's sort of inconvenient if every user overwrites the file (stdout > /dev/null) instead of appending. That's why I made it a fifo... but of course you're right :)
Jun
19
comment Trying to keep high school students out of the Wi-Fi network
Point #1? Good idea. Point #2? Wtf. If I was a teacher there I'd make a program that automatically fires off emails to whitelist every DNS request my system does until this annoying shit is gotten rid of.
Jun
1
comment Is a longer WiFi password more secure?
MAC filtering is the single most annoying thing you can do if you have any friends who might ever visit you. My uncle's computer guy thought it was an amazing security feature (despite being easily cloneable) and now nobody ever has wifi at theirs. Big pain in the ass for everyone.
May
27
comment Can attackers get anything with DoS attacks except crashing the service?
@RoryAlsop that should be an answer.
Mar
31
comment UDP Traffic is blocked
DNS can use TCP as well.
Feb
8
comment How long to brute-force WPA password?
@rox0r "I know no one would use md5 hashes for keys" /me shuffles away, muttering he thought it was a good idea :(
Feb
1
comment Why did Facebook not use HSTS for a long time after it became available?
"I can't think of any practical reason to disable secure browsing." I can: speed. If you only use it from home and you're the only user on the network, the security risk is negligible for most people.
Dec
2
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
I'm sure this is all technically true, but talking about your self-invented 5 tiers of security does not answer the question. And disclosure would be used when you are a certificate reseller, not when you (like most of the people here I think) got a website with a (hopefully signed) certificate.
Nov
23
comment How do major sites prevent DDoS?
@NewWorld Well google for it, it's not hard to find. One example is PayPal (Ebay-owned) being DDoSed by "Anonymous" not too long ago.
Nov
21
comment How do major sites prevent DDoS?
"Have you?" Yes.
Nov
5
comment Would it be possible to verify ownership of digital currency without a network connection to an authority server?
@AndrewHoffman user10008 is right, Bitcoin is exactly this. It's decentralized and prevents double spending. You should read up on it.
Oct
21
comment One liner to create passwords in linux?
Base64 has 64 possible characters while there are in fact 95 printable characters. Would not recommend.
Oct
21
comment One liner to create passwords in linux?
I would not use this answer because any hash-sum (md5sum, sha256sum, ...) outputs hexadecimals. They contain only 4 bits of randomness per byte while being just as hard to remember as any same-cased alphanumeric string. There are lots of packages and other ways to do this properly, even if you only use tools that are available on almost every Unix-like OS.
Oct
20
comment is there a risk in increasing esmtp header line length against rfc5822 - asa/pix question
Well, if I was sure about an answer I would post it :). But if you test with longer headers to make sure it doesn't crash anything, it is probably okay, at least until you find out more.
Oct
20
comment is there a risk in increasing esmtp header line length against rfc5822 - asa/pix question
How about increasing the limit instead of removing it? I could imagine that a multi-gigabyte header might crash things, so setting a reasonable limit (at least for the moment) might be a good idea.
Oct
15
comment Password recovery flow - Send Password recovery to any email?
So entering a non-registered email address would create an account for them automatically? It's sort of odd and you may want to consider whether users understand what is going on. Also, I could send lots of emails with useless links to people that never signed up for your website. Then again, you can do that with most register forms, but it's something to think about.
Oct
15
comment How does SSL/TLS work?
@MuhammadUmer Wish we'd get something interesting like this at school. We got one lecture with some encryption basics and even there I had to correct the teacher a few times... so that was useless... Keep on googling and never let school interfere with your education :) (Quote from Mark Twain.)
Oct
11
comment Is an 80 bit password good enough for all practical purposes?
@emory Responding to your first comment: good point. We shouldn't blindly trust a service to be perfectly secure. I still think it's okay to slack a little bit and use a weaker password on big services (as long as it's not crackable within 5 minutes with some serious power, probably nobody is going to bother when they got 90 million other passwords to try), but I think your main point is valid.