277 reputation
28
bio website e-faux.com
location Austria
age
visits member for 1 year, 5 months
seen Apr 3 at 21:11

Nov
14
awarded  Yearling
Nov
3
comment Which URL is revealed when using wildcard SSL?
Besides of SSL handshakes the eavesdropper could also see some DNS requests, which might reveal the actual called URL.
Mar
26
awarded  Enlightened
Mar
26
awarded  Nice Answer
Nov
29
comment Safe to make a VPN connection over coffee shop WIFI?
@AJHenderson, eg MPLS or L2TP, but to be honest both don't seem relevant for the concrete question.
Nov
28
comment Safe to make a VPN connection over coffee shop WIFI?
It should be mentioned, that VPN does not imply encryption by definition.
Nov
19
reviewed Reviewed How do you explain the necessity of “nuke it from orbit” to management and users?
Nov
19
reviewed Reviewed How is the available entropy in /dev/random calculated (or estimated)?
Nov
19
comment Starting a secure php session
Which concrete scenario do you have in mind? If your infrastructure is behind a load balancer, every server still sees the same client IP address.
Nov
19
reviewed Reviewed Identifying device based on the MAC address
Nov
19
comment Identifying device based on the MAC address
Vendor in this case should be NIC vendor, as Apple will buy their NICs.
Nov
19
answered Starting a secure php session
Nov
18
comment Preventing insecure webapp on subdomain compromise security of main webapp
Do you mean, that a cookie set on a sub-domain can also be read on the domain itself?
Nov
17
comment HTTP over GPRS - is it secure?
Even running a private APN won't give you much additional security, since the connection is still not encrypted.
Nov
15
reviewed Reviewed Use truecrypt to make data unrecoverable
Nov
15
awarded  Custodian
Nov
15
reviewed Reviewed Should I use Suhosin for PHP?
Nov
15
reviewed Reviewed Use truecrypt to make data unrecoverable
Nov
15
revised Validate hmac with hashed stored key
edited body
Nov
15
answered Validate hmac with hashed stored key