1,619 reputation
1519
bio website
location
age
visits member for 3 years
seen 20 hours ago

1d
answered Use cookies once stolen
Oct
19
awarded  Yearling
Oct
15
comment Lock a website login to a certain computer
No, but it would stop anyone else to access this page. Now you only need to tell the account owner not use this account from anywhere else. You could also check client IP during login.
Oct
15
revised Lock a website login to a certain computer
added 316 characters in body
Oct
15
answered Lock a website login to a certain computer
Oct
9
comment Where should a team store server credentials
For sure you should never send any password in an email or via skype.
Oct
9
awarded  Citizen Patrol
Oct
6
answered Unexpected emails have been sent - do I need to wipe my Android?
Sep
26
answered Is limiting access to a web script with .htaccess secure enough when that script can run arbitrary commands?
Sep
25
revised How do I secure Apache against the Bash Shellshock vulnerability?
iptables stuff removed because of comments
Sep
25
answered How do I secure Apache against the Bash Shellshock vulnerability?
Sep
18
comment One time passwords using Mobile phones
@Curious Mobile phone can also be attacked over the internet or by making you install a evil app. I personally would love to use my phone as login myself...
Sep
18
comment One time passwords using Mobile phones
@Curious Which point? The password manager is normally locked so you cannot get it's encryption key out of the RAM. The password is already stored so you do not need to create a secure connection to your phone (only the one from your PC to the server you need anyway). So you also do not need to authenticate your phone to the server.
Sep
18
comment One time passwords using Mobile phones
@Curious I updated my answer because that did not fit in here. ;)
Sep
18
revised One time passwords using Mobile phones
response to comment
Sep
17
comment One time passwords using Mobile phones
@Curious I was only talking about the phone. If you use your phone as authentication your account is compromised if you lose your phone.
Sep
17
answered One time passwords using Mobile phones
Sep
10
comment Is there a brute-force attack similar to what they demonstrate in movies
This does exist but in those cases you get the password instantly. Hacking is hard to show on tv because it involves a lot of thinking: youtube.com/watch?v=i5oc-70Fby4
Aug
1
comment How difficult is the USB firmware attack?
@RoryAlsop Thanks I think I wrote too much and maybe this question is to early and should be ask after BlackHat. I rewrote question and update my answer to clear things up.
Aug
1
revised How difficult is the USB firmware attack?
deleted 363 characters in body