18,257 reputation
34696
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 8 months
seen Aug 13 at 8:46

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Aug
18
awarded  Nice Answer
Jul
10
awarded  Good Answer
Jul
2
awarded  Curious
Jun
6
awarded  Generalist
Jun
3
awarded  Good Answer
May
7
awarded  Nice Answer
Apr
28
awarded  Nice Answer
Apr
16
awarded  Favorite Question
Apr
7
comment Using same CSRF Token for Multiple account creation
@Xander, depending on the situation this may be an issue because the IP-address in the server log files will not point to the attacker but to the victim. This is assuming that the CSRF token is not logged. For example an attacker is able to frame a victim by letting his browser create an account and access some illegal information (e. g. copyright violation or worse).
Feb
27
awarded  Good Answer
Feb
19
comment Is 'Forge' Javascript crypto library secure?
@FrancisSnipe, keep in mind that you need a secure way (e. g. https) to transmit the html and javascript code to the client. Otherwise an attacker can add some code to send a copy of the unencrypted data elsewhere.
Feb
8
comment Can you generate Diffie-Hellman parameters quickly
Crypto.SE does not want questions about programming. I suspect there is an issue with the random number source.
Dec
20
comment How to stay anonymous in public wireless network?
Google cookies and the unique identifier used by e. g. Firefox to download the list of malicious sites in segments are further identifiers.
Dec
19
awarded  Enlightened
Dec
19
awarded  Nice Answer
Dec
10
awarded  Yearling
Dec
4
awarded  Enlightened
Dec
4
awarded  Nice Answer
Nov
22
awarded  Popular Question
Nov
13
reviewed Approve suggested edit on Cross site scripting in url?