485 reputation
114
bio website camilstaps.nl
location Netherlands
age
visits member for 1 year, 9 months
seen 21 hours ago

I'm a student Computer Science & Cyber Security (Dutch page) at the Radboud University Nijmegen in the Netherlands. I'm also a freelance PHP (and more) developer running my own company, ViviSoft.


Stack Exchange Q&A site proposal: Gamification


profile for Camil Staps on Stack Exchange, a network of free, community-driven Q&A sites


21h
accepted How does Yandex Alpha sign me in automatically?
23h
comment How does Yandex Alpha sign me in automatically?
@AndréDaniel oh right, forgot about that.
23h
comment How does Yandex Alpha sign me in automatically?
@dgn see my previous comment, it's also for you ;)
23h
comment How does Yandex Alpha sign me in automatically?
@AndréDaniel that's indeed what it looks like when I look with wireshark, thanks. I would expect websites like facebook to check that the user agent would stay the same for a certain session though, to make it harder to steal a session.
1d
comment How does Yandex Alpha sign me in automatically?
@dgn good idea, will do that when I get home tonight.
1d
revised How does Yandex Alpha sign me in automatically?
added 270 characters in body
1d
comment How does Yandex Alpha sign me in automatically?
@dgn no, not in Chrome and not in any other browser I have installed (FF, IE, Opera, Opera beta). I made a little test with a PHP script starting a session and displaying cookie contents. I opened it first in Chrome, and after I started Yandex Alpha and opened it there. The PHPSESSID cookie had not been copied. But maybe it happens only when you install the browser.
1d
revised How does Yandex Alpha sign me in automatically?
added 116 characters in body
1d
asked How does Yandex Alpha sign me in automatically?
Nov
19
comment Storing AES password for verification
Thank you, I removed my downvote ;)
Nov
18
comment Why protect files with sensative information with .htacces?
Thanks very much, didn't know about that. +1!
Nov
18
comment Why protect files with sensative information with .htacces?
If we're talking about a PHP file that makes a connection with a database (the passwords are there, but in PHP strings, and won't be outputted), and Apache is set up to process all PHP files before sending them to the client, what exactly would be a possible attack against which .htaccess would secure?
Nov
18
comment Storing AES password for verification
Your first paragraph on collision resistance is incorrect. Collision resistance is resistance against finding any two inputs with the same result. If you have a hash and want to compute an input with that hash (in the example of the testament), you're talking about pre-image resistance. See here: en.wikipedia.org/wiki/Cryptographic_hash_function#Properties
Nov
18
comment Can password_verify() be used to identify password after database breach?
@Mr.X no problem, happy to help!
Nov
18
comment Can password_verify() be used to identify password after database breach?
Please don't accept answers too fast. Other users may have something else to say, or may have a better explanation, and they may not look at your question because they see it has been answered already. You can wait a day or so, we're not in a hurry :)
Nov
18
answered Can password_verify() be used to identify password after database breach?
Oct
26
comment Is the option to jump to blanks in password fields a security risk?
This is a security risk for saving passwords, not for being able to jump to blanks.
Oct
17
accepted Could SSL-like encryption be used for not password-protected wireless access points?
Oct
15
comment Could SSL-like encryption be used for not password-protected wireless access points?
Yes, I would use a CA for that.
Oct
15
comment Could SSL-like encryption be used for not password-protected wireless access points?
No, I would actually suggest a scheme in which SSL would be used to add an extra encryption layer. Still, HTTP and HTTPS would be used according to the server, but then that connection is encrypted. However, now I see the problem: every wireless access point would need to get its own certificate from a CA, that would mean many many certificates.