586 reputation
37
bio website
location Berlin, Germany
age
visits member for 3 years, 1 month
seen 2 days ago

Jan
20
comment Viable way to ruin a milk corporation?
I don't think people would take the press release seriously. It might be better to issue a denial about the fact that there's fecal contamination that exceeds the legal guidelines and that corp X things that the legal guidelines for fecal contamination are quite alright.
Jan
14
awarded  Necromancer
Jan
13
comment Protecting user data via encryption
@lee : I'm not sure that you have absolutely have to adhere to HIPAA when you store heart data, I think plenty of applications out there don't. I made the recommendation more in the spirit of recommending best practices. But I'm no expert...
Jan
12
answered Protecting user data via encryption
Jan
8
comment How to detect anomalous activity in web server traffic?
Anomalous activity might just mean that you hit the front page of reddit.
Jan
2
comment How to find out the IP address of email sender in Gmail
Tracking someone down is a matter of gathering as much information as possible. If the person you are searching isn't aware that his IP address gets leaked than it can be quite useful information. Even if the person with whom you are interacting is connecting from a Tor exit node that tells you something about them.
Jan
2
comment Question: How to plan email policy for start-ups?
You are not exposing information that will put your company at harm, yet you are violating the policy of a total ban on outside communication. This suggest that your policy is too restrictive. Usually startups are places where people are productive because they don't have many burocratic rules. You are proposing a burocratic rule that makes some things harder. Whether the costs outweigh the benefits depends on the threats that your startup faces. If you have overly strict rules that you yourself break, you train your developers that security rules can be broken.
Jan
2
answered Security of LastPass + YubiKey
Jan
2
comment Is there any reason in particular encryption keys aren't arbitrarily large?
@Celeritas : The fact that there are no known ways to hack AES doesn't mean that it's impossible to find a hack in the future. Nobody proved mathematically that it's impossible to find a hack.
Jan
2
answered Question: How to plan email policy for start-ups?
Dec
26
comment Building a website with MAXIMUM website security
Maximum security is a bad goal. The NSA just started to prevent a lot of operations from being done by a single sys admin. Most companies are okay with trusting their sys admins not to leak the customer credit card database. The goal should be to have reasonable security and follow best practices.
Dec
21
comment Disclose to user if account exists?
Let's say I ask a work collegue for his facebook account. He tells me that he doesn't have a facebook account. In fact he has a private account. If I do have his private email address I can prove that he lies to me.
Dec
21
answered Disclose to user if account exists?
Dec
21
answered Can a website determine what OS or webbrowser a visitor is using if the useragent is blanked/changed?
Dec
21
answered Is it a good idea to have a “master” password?
Dec
20
comment Why improvising your own Hash function out of existing hash functions is so bad
@GeorgePowell : A hacker isn't only interested in recovering original plaintext passwords. He might also be interested in finding collisions. It's possible that you increase the amount of collisions by chaining those functions together.
Dec
20
comment Bcrypt SHA-256 implementation
KeePass allows me to choose and remember 256 bit passwords as far as external services are concerned. It annoying when websites don't accept 256 bit passwords.
Dec
20
awarded  Commentator
Dec
20
comment Bcrypt SHA-256 implementation
You don't know the capability of a quantum computer that exists in 20 years. You also can't forcast mathematical advances. If you want to encrypt something to be safe years into the future, than you can't say what happens to be overkill.
Dec
20
comment Is it a good idea to have a “master” password?
Your master password can get broken because you entered it in the presence of a camera. That doesn't automatically mean that the file in which the passwords were stored is also compromised.