18,797 reputation
34899
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 11 months
seen Nov 6 at 10:04

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Jul
4
reviewed Approve suggested edit on Security of remailers
Jul
3
reviewed Approve suggested edit on How can I punish a hacker?
Jul
3
reviewed Reject suggested edit on How do DoS/DDoS work?
Jun
28
comment Response to script-kiddies “scanning” website for vulnerabilities?
Not all of those are actively done by people, but by worms trying to spread themselves.
Jun
28
revised Webserver logs show someone is trying to hack my site, what should I do?
use more general title, shortened log example
Jun
27
awarded  Informed
Jun
26
comment XSS prevention through Content Security Policy
CSP was designed to allow trusted JavaScript not to forbid JavaScript entirely. If you stick with modern best practices (e. g. no intervening of JS and HTML), very little or even no changes are required.
Jun
22
reviewed Approve suggested edit on Save private messages encrypted in database
Jun
21
reviewed Approve suggested edit on What is the difference between Serial Number and Thumbprint?
Jun
20
reviewed Approve suggested edit on Should user IDs be implemented in online banking?
Jun
20
reviewed Approve suggested edit on Are there any customizable vulnerability notification services?
Jun
20
reviewed Approve suggested edit on Are there any customizable vulnerability notification services?
Jun
15
reviewed Approve suggested edit on Why is blog spam always written so badly?
Jun
12
comment When to use SSL ? / When to send passwords via mail?
You can get SSL certificates, that are accepted by all common browsers, free of charge.
Jun
6
revised Identify code being run on website
deleted 66 characters in body
Jun
6
revised Identify code being run on website
replaced existing domain with a domain reserved for documentation purpose
Jun
5
answered Is it safe to store password in HTML5 sessionStorage?
May
30
revised Why does this XSS vector work in svg but not in HTML?
edited tags; edited title
May
27
reviewed Reject suggested edit on What is the difference between authorized_key and known_host file for SSH?
May
23
comment Insecure versions of crypt hashes
@Shackrock $6 is Sha512Crypt. That is an algorithm that is similar to BCrypt, but different. Most notably, it is based on Sha512 instead of Blowfish.