17,527 reputation
34392
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 4 months
seen Apr 16 at 16:16

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Apr
16
awarded  Favorite Question
Apr
7
comment Using same CSRF Token for Multiple account creation
@Xander, depending on the situation this may be an issue because the IP-address in the server log files will not point to the attacker but to the victim. This is assuming that the CSRF token is not logged. For example an attacker is able to frame a victim by letting his browser create an account and access some illegal information (e. g. copyright violation or worse).
Feb
27
awarded  Good Answer
Feb
19
comment Is 'Forge' Javascript crypto library secure?
@FrancisSnipe, keep in mind that you need a secure way (e. g. https) to transmit the html and javascript code to the client. Otherwise an attacker can add some code to send a copy of the unencrypted data elsewhere.
Feb
8
comment Can you generate Diffie-Hellman parameters quickly
Crypto.SE does not want questions about programming. I suspect there is an issue with the random number source.
Dec
20
comment How to stay anonymous in public wireless network?
Google cookies and the unique identifier used by e. g. Firefox to download the list of malicious sites in segments are further identifiers.
Dec
19
awarded  Enlightened
Dec
19
awarded  Nice Answer
Dec
10
awarded  Yearling
Dec
4
awarded  Enlightened
Dec
4
awarded  Nice Answer
Nov
22
awarded  Popular Question
Nov
13
reviewed Approve suggested edit on Cross site scripting in url?
Nov
7
awarded  Enlightened
Nov
7
awarded  Nice Answer
Nov
3
comment What's the difference between SSL, TLS, and HTTPS?
@thejh, oops, good catch.
Oct
20
awarded  Enlightened
Oct
19
awarded  Nice Answer
Oct
16
revised Can we make sure that the new Lavabit certificate is not under control of the FBI?
added 254 characters in body
Oct
16
comment Can we make sure that the new Lavabit certificate is not under control of the FBI?
This reminds me of an old movie in which the terrorist holds a gun towards the head of the president's daughter behind the camera.