663 reputation
48
bio website
location Berlin, Germany
age
visits member for 3 years, 8 months
seen 9 hours ago

Nov
5
comment Do we really need a long and complicated password for websites?
@drpexe Do you get any spam emails? Then a bot somewhere is targeting your username.
Sep
18
awarded  Editor
Sep
18
revised Trying to understand why signatures in root certs “are not used”?
Formatting
Sep
18
suggested suggested edit on Trying to understand why signatures in root certs “are not used”?
Sep
9
answered Why are apps signed?
Sep
9
comment Why is HTTPS not the default protocol?
A telephone number on a "brochure-ware site" might be completely public information. That doesn't mean being able to spoof a telephone number on that website isn't a security risk.
Sep
2
answered Why can't PGP/GPG Web-of-Trust be automated?
Aug
17
answered Why do we use such a redundant language (English) for network communication?
Aug
16
accepted Why doesn't the OS give every application a secret password?
Aug
16
asked Why doesn't the OS give every application a secret password?
Aug
10
comment Is there ever a good reason _not_ to use TLS/SSL?
The fact that you don't value your privacy doesn't mean that you can be confident that you don't have users who value their privacy.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
Not everyone who uses the website is a member of the target audience. It's also not trivial to understand what someone can do with knowledge of browsing habits.An attacker can build personality profiles through complex correlations that you simply don't see when you think about your website.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
The can assess their security needs, but not the needs of the visitors especially if the owner of the website doesn't have much information about the visitors.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
You never know beforehand what kind of information might be critical.
Jul
26
comment How to secure a public device against abuse?
Location services are not secure. A rooted Android phone can give an App any location it wanst.
Jun
28
awarded  Yearling
Jan
20
comment Viable way to ruin a milk corporation?
I don't think people would take the press release seriously. It might be better to issue a denial about the fact that there's fecal contamination that exceeds the legal guidelines and that corp X things that the legal guidelines for fecal contamination are quite alright.
Jan
14
awarded  Necromancer
Jan
13
comment Protecting user data via encryption
@lee : I'm not sure that you have absolutely have to adhere to HIPAA when you store heart data, I think plenty of applications out there don't. I made the recommendation more in the spirit of recommending best practices. But I'm no expert...
Jan
12
answered Protecting user data via encryption