17,527 reputation
34392
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 4 months
seen 2 days ago

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Oct
16
revised Can we make sure that the new Lavabit certificate is not under control of the FBI?
added 728 characters in body
Oct
16
answered Can we make sure that the new Lavabit certificate is not under control of the FBI?
Oct
16
reviewed Approve suggested edit on How to secure my network, laptop, ipad and email accounts which are possibly hacked?
Oct
16
awarded  Nice Answer
Oct
12
reviewed Approve suggested edit on Can someone please briefly explain HIPPA compliance?
Oct
9
reviewed Reject suggested edit on Is the system bios and network card protected by the OS firewall?
Oct
2
reviewed Approve suggested edit on Apple FileVault — would Apple build a backdoor?
Sep
25
answered iPhone 5S security: Given someone's fingerprint can I use a 3D printer to create a fake finger with a real fingerprint on it?
Sep
20
reviewed Approve suggested edit on Hide a machine on LAN
Sep
12
reviewed Approve suggested edit on Is online banking more secure on iOS than a desktop computer?
Sep
5
comment Is there a way to block Ultrasurf OR can I have McAfee nuke it?
Hello Monsuco and welcome to Security.SE. Unfortunately it almost impossible to protect computers to which adversaries have physical access to. Furthermore, your adversaries have a lot of time, motivation and probably technology skills. I suggest to approach this issue from a social angle: Create a set of rules for acceptable use of school property with realistic (!) consequences for concrete types of misuse.
Aug
19
reviewed Approve suggested edit on Does anyone know how Avast File Reputation works?
Aug
14
comment Wildcard SSL Certificates & SAAS
Related: What vulnerabilities could be caused by a wildcard SSL cert?
Aug
14
reviewed Approve suggested edit on What is a Shrink Wrap code attack?
Aug
9
reviewed Reject suggested edit on How does PGP differ from S/MIME?
Aug
9
comment LDAP vs MySQL for Usernames and Passwords
One very common mistake with authenticating against an LDAP server is not paying attention to anonymous binds. Many LDAP servers return success on an authentication attempt with an empty password, regardless of the username.
Aug
6
revised Should we protect web application source code from being stolen by web hosts through obfuscation?
added 1 characters in body
Jul
23
comment What's the use of making users use digits, uppercase-lowercase combination password if the passwords are hashed?
Mr. Alien, I think this is a very valid question and therefore I prefer not to delete it. I removed the reference to a hash-function which is not suitable for hashing password. This may be one of the reasons for the downvotes. Please have a look at security.stackexchange.com/q/15910/665 regarding password hashing algorithms.
Jul
23
revised What's the use of making users use digits, uppercase-lowercase combination password if the passwords are hashed?
deleted bad choice of hash function for passwords
Jul
22
reviewed Approve suggested edit on How secure is Ubuntu's default full-disk encryption?