270 reputation
111
bio website
location Alphen aan Den Rijn, The Netherlands
age 53
visits member for 1 year, 10 months
seen 23 hours ago

Software developer at TimeTell BV, The Netherlands


Jul
15
awarded  Quorum
Jul
6
revised Is my PC safe? need help
General cleanup
Jul
6
suggested suggested edit on Is my PC safe? need help
Jun
26
answered How to limit the need to type a long master passphrase to only once per login session?
Jun
25
comment Convincing my manager to use salts
A list of blog posts about the frequency distribution of common passwords might help convince him. Or posts about the consequences of not using salts, like this recent one: nakedsecurity.sophos.com/2014/06/24/… Although I doubt that only this will turn him over (see the remarks in Tom Leek's answer).
Jun
18
awarded  Excavator
Jun
18
revised How to block the websites on client machines
general cleanup
Jun
18
suggested suggested edit on How to block the websites on client machines
Jun
14
comment Securing data at rest
What are you defending against? If it's the entire world, your question is too broad.
Jun
13
comment How can Facebook use history data in browser
@Vineet This is not about liked pages. Just the button being displayed in the browser is enough.
Jun
13
comment How can Facebook use history data in browser
BTW As a web site owner you can do something about this
Apr
18
comment What security mechanisms are used in BGP and why do they fail?
There are some comments about BGP security in episode 432 of Security Now (grc.com/securitynow.htm; transcripts available). What Steve was saying in that episode is 'we should do an episode on BGP', but that has not happened yet (latest is 451). Maybe it's worth keeping an eye on the podcast.
Apr
5
comment Is Telegram secure?
Yes, Threema is 'trust no one': they don't have the keys so they cannot decrypt your messages. It costs $2 IIRC. Threema also does authentication on several levels, the strongest being that if you exchange QR code between phone displays, you know from that moment on that you are communication with that phone ('person' would be incorrect, someone could have stolen your contacts' phone).
Apr
4
revised Proving SSL need
general cleanup
Apr
4
suggested suggested edit on Proving SSL need
Mar
21
comment Should I reject obviously poor passwords?
Can I upvote this answer twice? The second time for "Second, you want to educate users on what a weak password is"
Mar
21
comment How do I allow websites to call my desktop app over HTTPS?
"The kicker is the app is open-source, so I'll have to distribute the certificate/key to all the clients." No you don't. You leave it to the users to get their own certificate. You just describe to them how to implement it. We have exactly the same situation (although not open source): the user can connect to our software hosted by us with our certificate, or he can host everything himself but then he'll have to get his own cert and use that. (security.stackexchange.com/questions/52654/…)
Mar
6
awarded  Student
Mar
6
awarded  Scholar
Mar
6
accepted Risks associated with distributing encrypted private key with our software?