18,282 reputation
34697
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 8 months
seen Aug 13 at 8:46

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Aug
14
comment Wildcard SSL Certificates & SAAS
Related: What vulnerabilities could be caused by a wildcard SSL cert?
Aug
14
reviewed Approve suggested edit on What is a Shrink Wrap code attack?
Aug
9
reviewed Reject suggested edit on How does PGP differ from S/MIME?
Aug
9
comment LDAP vs MySQL for Usernames and Passwords
One very common mistake with authenticating against an LDAP server is not paying attention to anonymous binds. Many LDAP servers return success on an authentication attempt with an empty password, regardless of the username.
Aug
6
revised Should we protect web application source code from being stolen by web hosts through obfuscation?
added 1 characters in body
Jul
23
comment What's the use of making users use digits, uppercase-lowercase combination password if the passwords are hashed?
Mr. Alien, I think this is a very valid question and therefore I prefer not to delete it. I removed the reference to a hash-function which is not suitable for hashing password. This may be one of the reasons for the downvotes. Please have a look at security.stackexchange.com/q/15910/665 regarding password hashing algorithms.
Jul
23
revised What's the use of making users use digits, uppercase-lowercase combination password if the passwords are hashed?
deleted bad choice of hash function for passwords
Jul
22
reviewed Approve suggested edit on How secure is Ubuntu's default full-disk encryption?
Jul
19
awarded  Good Answer
Jul
18
revised How can I protect myself from this kind of clipboard abuse?
added 114 characters in body
Jul
13
awarded  passwords
Jul
12
answered How do I generate a blowfish password hash in Ubuntu?
Jul
8
awarded  Enlightened
Jul
8
awarded  Nice Answer
Jul
6
comment Block all kind of querys from ip
It may be a good idea to let the switches do this work because they know if there is a device connected and what mac address it has.
Jul
6
revised Suspicious entries in MySQL database from user input forms - sql injection?
deleted 1225 characters in body
Jul
4
reviewed Approve suggested edit on Security of remailers
Jul
3
reviewed Approve suggested edit on How can I punish a hacker?
Jul
3
reviewed Reject suggested edit on How do DoS/DDoS work?
Jun
28
comment Response to script-kiddies “scanning” website for vulnerabilities?
Not all of those are actively done by people, but by worms trying to spread themselves.