meta user
network profile
| bio | website | klevjers.com |
|---|---|---|
| location | Oslo, Norway | |
| age | 24 | |
| visits | member for | 8 months |
| seen | 18 hours ago | |
| stats | profile views | 78 |
Specializing in computer security, programming and networks.
Huge fan of RFCs.
|
Jun 5 |
revised |
Where is my password stored on Windows 7? I am rather certain that this is correct for Windows 7. |
|
Jun 5 |
suggested | suggested edit on Where is my password stored on Windows 7? |
|
May 28 |
comment |
Best practices for integrating external javascript? If you must link to it, I suppose you could do a server-side integrity check of the remote file, and if its integrity isn't sound - load a local version. Of course, you have to keep track of authorized changes of the remote version.. |
|
Apr 1 |
comment |
What is the “about:blank” context for browser security and privacy? In the case of data URI's, IIRC each URI seems isolated from every other. I.e. data:text/html;,foo cannot contact data:text/html;,bar. This may then also apply to about:'s |
|
Mar 19 |
comment |
OTR encrypted chatroom or IM You might want to check out Crypho, at crypho.com |
|
Mar 10 |
revised |
What is the difference between https://google.com and https://encrypted.google.com? Better focus on encrypted vs not, instead of http vs https |
|
Mar 10 |
suggested | suggested edit on What is the difference between https://google.com and https://encrypted.google.com? |
|
Mar 10 |
comment |
What is the difference between https://google.com and https://encrypted.google.com? This is about encrypted.google.com vs google.com, not http and https. |
|
Mar 10 |
comment |
Increase the security of an already stored password hash I guess those are bits not bytes? |
|
Feb 12 |
comment |
How isolated are 2 operating systems on 1 harddisk? Could you elaborate on why each should have its own AV? Is it required only for real time checks and locked files, or am I forgetting something crucial? |
|
Feb 11 |
comment |
Generate DB Password from license key - a good idea? If the license key is treated as a password by the customer, which I assume will be the case, I'd say that's fine. You wouldn't want anyone having your license key anyway. |
|
Feb 11 |
revised |
Authentication system against the user added comment to important comment! |
|
Feb 11 |
comment |
Authentication system against the user You are absolutely correct, I should have mentioned that. |
|
Feb 11 |
comment |
Strange android app … possibly a mass malware? Just a side note: You can take a screen shot holding the power button and tapping the home screen. |
|
Feb 10 |
answered | Authentication system against the user |
|
Feb 8 |
comment |
Is using the md5 hashing algorithm as method for authorization in an HTTP POST request unsafe? If the password is of >128 bits entropy, you're fine. Also, this might be of interest: klevjers.com/projects/master/digest%20attack/digattack.pdf |
|
Jan 30 |
revised |
From a security standpoint should users be asked to confirm their password when registering? edited tags |
|
Jan 28 |
comment |
Can malware hide their network activity from Resource Monitor (perfmon)? I presume it is possible to be using other, seemingly legit applications to do all network communications for you.. Like telnet.exe. Even without needing a rootkit, hypervisor, etc. |
|
Jan 25 |
comment |
securely destroying data on an external hard drive If you're on Windows, Eraser looks pretty interesting. |
|
Jan 23 |
comment |
is it easier to get the original password if you have multiple hashes of it? @sujeesh What is a weak hash function in your opinion? |
