18,797 reputation
34899
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 11 months
seen Nov 6 at 10:04

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Oct
18
awarded  Enlightened
Oct
2
awarded  Enlightened
Oct
2
awarded  Nice Answer
Sep
30
awarded  Explainer
Aug
26
awarded  Nice Answer
Aug
18
awarded  Nice Answer
Jul
10
awarded  Good Answer
Jul
2
awarded  Curious
Jun
6
awarded  Generalist
Jun
3
awarded  Good Answer
May
7
awarded  Nice Answer
Apr
28
awarded  Nice Answer
Apr
16
awarded  Favorite Question
Apr
7
comment Using same CSRF Token for Multiple account creation
@Xander, depending on the situation this may be an issue because the IP-address in the server log files will not point to the attacker but to the victim. This is assuming that the CSRF token is not logged. For example an attacker is able to frame a victim by letting his browser create an account and access some illegal information (e. g. copyright violation or worse).
Feb
27
awarded  Good Answer
Feb
19
comment Is 'Forge' Javascript crypto library secure?
@FrancisSnipe, keep in mind that you need a secure way (e. g. https) to transmit the html and javascript code to the client. Otherwise an attacker can add some code to send a copy of the unencrypted data elsewhere.
Feb
8
comment Can you generate Diffie-Hellman parameters quickly
Crypto.SE does not want questions about programming. I suspect there is an issue with the random number source.
Dec
20
comment How to stay anonymous in public wireless network?
Google cookies and the unique identifier used by e. g. Firefox to download the list of malicious sites in segments are further identifiers.
Dec
19
awarded  Enlightened
Dec
19
awarded  Nice Answer