1,612 reputation
513
bio website blog.sw4j.de
location Bavaria, Germany
age 41
visits member for 2 years
seen Nov 4 at 6:16

I'm a profesional software developer using Java (and a little bit of Scala).


Nov
9
awarded  Yearling
Oct
14
comment Why the symmetric key is added to the message?
@raz Perhaps the lecturer has understand encryption but is unable to mediate his knowledge in an easy way... The explanation as given in this post is quite complete and correct.
Oct
14
revised Why the symmetric key is added to the message?
Extended answer
Oct
14
answered Why the symmetric key is added to the message?
Oct
14
comment Is it safe to use IP Addresses as an identity?
@Lighty But it still remains that the first answer is not correct and depends on the ISP...
Oct
14
comment Is it safe to use IP Addresses as an identity?
It is well known in Germany that your IP changes. This is a so called security feature of the ISPs. can also force the IP change by reconnecting to my ISP therefore I can change my IP always I want. Also the next problem is that my IP is later assigned to another user. And also I get an IP assigned that was assigned to another user before. For a background read the (translated german) wikipedia entry.
Oct
14
comment Is it safe to use IP Addresses as an identity?
For your first answer: Don't think localised to your own country. In Germany you get disconnected every 24 hours and get a new IP address every time you reconnect to your ISP.
Oct
7
reviewed No Action Needed Can you have Secure encryption with a backdoor, and still be secure?
Oct
7
awarded  Enthusiast
Oct
7
comment Breaking it gently
I would inform the owner of the package first. Only if the ower does not respond in a timely manner a full disclosure would be appropriate.
Oct
2
comment How to fix SSL algorithm for more security
@Elahe If you do not use certificates then you use TLS the wrong way.
Oct
2
answered How to fix SSL algorithm for more security
Sep
30
answered Protection of Private Keys
Sep
29
comment ShellShock vulnerability and Java Web Applications
@NoviceUser I've extended my answer. All risk also exists if you execute such commands indirectly. As I wrote an definitive answer is difficult as nobody here knows if any commands are executed (either directly or indirectly).
Sep
29
revised ShellShock vulnerability and Java Web Applications
Extended answer to be more clear about indirect executions
Sep
29
answered ShellShock vulnerability and Java Web Applications
Sep
25
awarded  Nice Answer
Sep
25
comment What is the meaning of “something AND 1=0” command in SQL?
@GdD edited answer to be more clear.
Sep
25
revised What is the meaning of “something AND 1=0” command in SQL?
Extended answer based on comments
Sep
25
answered What is the meaning of “something AND 1=0” command in SQL?