1,090 reputation
28
bio website michaelhendrickx.com
location Dubai, United Arab Emirates
age 32
visits member for 2 years
seen 2 days ago

Entropy isn't what it used to be.


Jul
9
answered how to block ip from head or ping or get or post to webserver (using apache and windows)?
Jul
9
comment Tor IP and cookies in hidden services
On another note, using JS people could find out if you're using Tor or not by linking resources from the "deep web".
Jul
7
comment Tor IP and cookies in hidden services
The hidden services is in my other comment, it seems to be anonimized. RFC1918 are internal addresses, like 10.0.0.2.
Jul
7
comment Tor IP and cookies in hidden services
this paper indicates that .onion sites are accessed through a rendez-vous point and is anonymized.
Jul
7
answered XSS with input in onclick attribute
Jul
7
comment Apache redirecting to unsecure port
What do you redirect to? Do you include the schema? Are you listening on both 80 and 443?
Jul
7
comment Tor IP and cookies in hidden services
What's a hidden service?
Jul
7
answered Tor IP and cookies in hidden services
Jul
6
answered Protocols equivalent to TLS?
Jul
6
answered Storing data permanently vs temporarily
Jul
3
comment Are two firewalls better than one?
Although a valid opint, the question stipulates firewalls "after" each other, and not in a HA setup.
Jul
3
answered Clarifying MITM attacks and Digital Certificate requirement
Jun
30
comment How do I secure my REST api that is being accessed by only one application?
If "they" can read SSL, then yes. But that would mean that they have access to either server, or do a successful MitM. The seconds one being unlikely (if you implement it right)
Jun
30
comment How do I secure my REST api that is being accessed by only one application?
The other questions was more about SSL communications and sessions, this seems to be app <-> app authentication.
Jun
30
answered How do I secure my REST api that is being accessed by only one application?
Jun
29
answered How could you find wildcard subdomains on websites?
Jun
26
awarded  Yearling
Jun
25
comment How to become Intermediate Certificate Authority?
If your end users are your branch organizations, then you can install your CA cert on their machines. If you want to create certificates "for your branch organizations" to serve to the rest of the world, then you need to sign up with a CA.
Jun
23
comment Drop cookie or inject HTTP traffic
The question is very unclear: what do you mean with dropping cookies. Not sending the "Cookie:" header with your requests?
Jun
23
comment Why do WordPress installations retrieve the crypto secrets remotely on installation?
Great material for a conspiracy theory. :)