1,273 reputation
918
bio website None
location Netherlands
age 38
visits member for 3 years, 6 months
seen yesterday

Just a guy with some linux experience.


Oct
29
comment Do bad passwords produce bad salted hashes?
-1 for use of the word "impossible" in a security/cryptography context.
Oct
15
awarded  Explainer
Oct
11
comment Why is using SSH key more secure than using passwords?
Also, even if it /would/ get forwarded, it'd be forwarded across an established and secured SSH connection.
Sep
5
comment What is 'TLS version intolerance'
@MSalters Hah. Ahaha. Ahahahahahahahahaha....
Aug
31
comment Is it possible to design a system where the client doesn't have to trust the server?
@queueoverflow Assuming that the phone call wasn't being monitored.
Aug
29
comment Can an HTTPS site be malicious or unsafe?
All it means is that if you contract malware from that site, it was actually coming from that site and not somewhere else, so at least you're sure of who to blame.
Aug
19
reviewed Reviewed Application security training for developers
Aug
14
comment Are there actions taken against websites that deliver malware?
@bjarkef, look at Chris Murray's response below to see why your suggestion is a bad idea in practice.
Aug
14
comment What does “sandboxing” mean for Chrome OS?
Possibly related: What is sandboxing?
Aug
13
awarded  Guru
Aug
13
awarded  Good Answer
Aug
13
comment Are there actions taken against websites that deliver malware?
@CodesInChaos Calling everyone who's ever fallen for a particularly clever phishing scam idiots isn't constructive. At best, it's a backhanded way of asserting smug superiority for yourself, at worst it's victim-blaming.
Aug
13
comment Are there actions taken against websites that deliver malware?
@bjarkef They do perform due diligence by checking that the credit card number is valid at the time, and by manually investigating when a phishing site is reported. As codes points out a little abrasively, there is no law requiring non-anonymity for website builders, and there shouldn't be.
Aug
13
awarded  Mortarboard
Aug
13
awarded  Nice Answer
Aug
13
comment Are there actions taken against websites that deliver malware?
Although even when we do, chances are by the time someone receives the notification and reacts to it the malfeasants have already moved on to the next badly secured website and all we can do is clean up the mess they leave behind.
Aug
13
answered Are there actions taken against websites that deliver malware?
Jul
31
comment Can ISP use MITM attack to “break” encrypted traffic?
There is at least one firewall manufacturer I'm aware of that explicitly uses MITM certificate shenanigans in order to decrypt HTTPS -- ostensibly just for application-level intrusion scanning, but traffic interception is possible as well.
Jul
5
comment Are two firewalls better than one?
Also, point of note, but almost all industry-grade firewalls in the market nowadays can handle a DMZ setup with only a single firewall box by maintaining different networks on different ethernet ports.
Jul
5
comment Are two firewalls better than one?
@user3395407 To summarize, all you manage to do with this setup is add another single point of failure and double your sysadmins' workload for an extremely limited and nebulous benefit at best. I'm sure they'll thank you for it.