1,400 reputation
418
bio website klevjers.com
location Oslo, Norway
age 25
visits member for 1 year, 10 months
seen Jul 29 at 5:39

Specializing in computer security, programming and networks.

Huge fan of RFCs.


Jul
1
comment Is it safe to store public key encrypted password in the Mobile Device for authentication purposes?
If an attacker can get to the encrypted password and send it to the server without knowing the password, it won't help much. It's still a static shared secret.
Jun
27
awarded  Popular Question
Oct
10
awarded  Yearling
Oct
2
revised How does time-limited trial software work?
Just some language laundry. Pedantic me.
Oct
2
revised Communicate between two sites both with SSL
I think we're moving closer to authentication as a topic here. Really want to remove the SSL part also.
Oct
2
suggested suggested edit on How does time-limited trial software work?
Oct
2
suggested suggested edit on Communicate between two sites both with SSL
Oct
2
comment Communicate between two sites both with SSL
While navigating site A, how do you tell the site who's logged in? Are you using a session ID, this could probably be passed to site B on each request as you would on site A, as long as authentication is synchronously established at both locations. More advanced, so-called Single Sign-On is a large topic: en.wikipedia.org/wiki/Single_sign-on
Jul
3
comment Besides IP addresses, how else could one be identified?
Have a look at Maltego for identifying and linking people with online entities. paterva.com/web6/products/maltego.php
Jun
5
revised Where is my password stored on Windows 7?
I am rather certain that this is correct for Windows 7.
Jun
5
suggested suggested edit on Where is my password stored on Windows 7?
May
28
comment Best practices for integrating external javascript?
If you must link to it, I suppose you could do a server-side integrity check of the remote file, and if its integrity isn't sound - load a local version. Of course, you have to keep track of authorized changes of the remote version..
Apr
1
comment What is the “about:blank” context for browser security and privacy?
In the case of data URI's, IIRC each URI seems isolated from every other. I.e. data:text/html;,foo cannot contact data:text/html;,bar. This may then also apply to about:'s
Mar
19
comment OTR encrypted chatroom or IM
You might want to check out Crypho, at crypho.com
Mar
10
revised What is the difference between https://google.com and https://encrypted.google.com?
Better focus on encrypted vs not, instead of http vs https
Mar
10
suggested suggested edit on What is the difference between https://google.com and https://encrypted.google.com?
Mar
10
comment What is the difference between https://google.com and https://encrypted.google.com?
This is about encrypted.google.com vs google.com, not http and https.
Mar
10
comment Increase the security of an already stored password hash
I guess those are bits not bytes?
Feb
12
comment How isolated are 2 operating systems on 1 harddisk?
Could you elaborate on why each should have its own AV? Is it required only for real time checks and locked files, or am I forgetting something crucial?
Feb
11
comment Generate DB Password from license key - a good idea?
If the license key is treated as a password by the customer, which I assume will be the case, I'd say that's fine. You wouldn't want anyone having your license key anyway.