621 reputation
47
bio website
location Berlin, Germany
age
visits member for 3 years, 5 months
seen yesterday

Aug
17
answered Why do we use such a redundant language (English) for network communication?
Aug
16
accepted Why doesn't the OS give every application a secret password?
Aug
16
asked Why doesn't the OS give every application a secret password?
Aug
10
comment Is there ever a good reason _not_ to use TLS/SSL?
The fact that you don't value your privacy doesn't mean that you can be confident that you don't have users who value their privacy.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
Not everyone who uses the website is a member of the target audience. It's also not trivial to understand what someone can do with knowledge of browsing habits.An attacker can build personality profiles through complex correlations that you simply don't see when you think about your website.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
The can assess their security needs, but not the needs of the visitors especially if the owner of the website doesn't have much information about the visitors.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
You never know beforehand what kind of information might be critical.
Jul
26
comment How to secure a public device against abuse?
Location services are not secure. A rooted Android phone can give an App any location it wanst.
Jun
28
awarded  Yearling
Jan
20
comment Viable way to ruin a milk corporation?
I don't think people would take the press release seriously. It might be better to issue a denial about the fact that there's fecal contamination that exceeds the legal guidelines and that corp X things that the legal guidelines for fecal contamination are quite alright.
Jan
14
awarded  Necromancer
Jan
13
comment Protecting user data via encryption
@lee : I'm not sure that you have absolutely have to adhere to HIPAA when you store heart data, I think plenty of applications out there don't. I made the recommendation more in the spirit of recommending best practices. But I'm no expert...
Jan
12
answered Protecting user data via encryption
Jan
8
comment How to detect anomalous activity in web server traffic?
Anomalous activity might just mean that you hit the front page of reddit.
Jan
2
comment How to find out the IP address of email sender in Gmail
Tracking someone down is a matter of gathering as much information as possible. If the person you are searching isn't aware that his IP address gets leaked than it can be quite useful information. Even if the person with whom you are interacting is connecting from a Tor exit node that tells you something about them.
Jan
2
comment Question: How to plan email policy for start-ups?
You are not exposing information that will put your company at harm, yet you are violating the policy of a total ban on outside communication. This suggest that your policy is too restrictive. Usually startups are places where people are productive because they don't have many burocratic rules. You are proposing a burocratic rule that makes some things harder. Whether the costs outweigh the benefits depends on the threats that your startup faces. If you have overly strict rules that you yourself break, you train your developers that security rules can be broken.
Jan
2
answered Security of LastPass + YubiKey
Jan
2
comment Is there any reason in particular encryption keys aren't arbitrarily large?
@Celeritas : The fact that there are no known ways to hack AES doesn't mean that it's impossible to find a hack in the future. Nobody proved mathematically that it's impossible to find a hack.
Jan
2
answered Question: How to plan email policy for start-ups?
Dec
26
comment Building a website with MAXIMUM website security
Maximum security is a bad goal. The NSA just started to prevent a lot of operations from being done by a single sys admin. Most companies are okay with trusting their sys admins not to leak the customer credit card database. The goal should be to have reasonable security and follow best practices.