Hendrik Brummermann

15,922 reputation

23483

bio	website	faiumoni.de/de/start.html
	location	Germany, Europe
	age	32
visits	member for	2 years, 6 months
	seen	5 hours ago
stats	profile views	1,675

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.

	15,922 reputation	bio	website	faiumoni.de/de/start.html	visits	member for	2 years, 6 months
23483 badges		location	Germany, Europe		seen	5 hours ago

summary answers questions tags badges favorites bounties reputation activity

1,408 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 8	comment	Is it possible to increase the cost of BCrypt or PBKDF2 when its already calculated and without the original password? Possible Duplicate: security.stackexchange.com/q/32361/665
Apr 7	reviewed	Approve suggested edit on man-in-the-middle tag wiki excerpt
Apr 7	reviewed	Approve suggested edit on man-in-the-middle tag wiki
Apr 6	awarded	Nice Answer
Apr 6	comment	Server root attack? This looks like an attempt to exploit registerglobals
Apr 6	answered	Protecting against cross-subdomain cookie attacks
Apr 6	revised	Protecting against cross-subdomain cookie attacks deleted 15 characters in body
Apr 6	comment	Getting credentials using proxy server Possible duplicate of security.stackexchange.com/questions/2914
Apr 2	reviewed	Approve suggested edit on Why is application crash considered insecure?
Mar 27	revised	Is there a length beyond which increasing password length provides no additional security? added 47 characters in body
Mar 21	comment	Is it possible to execute a php script in an image file? Please note Apache's support for double extensions: something.php.gif will be handled by PHP in common installations despite the final extension being .gif.
Mar 18	comment	How would one crack a weak but unknown encryption protocol? Hello RamRachum, Challenge to decode something style-questions are considered off topic here.
Mar 18	revised	How would one crack a weak but unknown encryption protocol? deleted "break my home brown crypto chellenge"-type edit
Mar 12	awarded	Nice Answer
Mar 12	reviewed	Approve suggested edit on Anti-Phishing Campaign Objective
Mar 9	comment	Admin area in my php website is vulnerable to sql injection without login You should fix the SQL injection vulnerability nonetheless by consequently using mysql_real_escape_string or preferable parameterized queries. Otherwise this is a mine, just waiting for some code reuse in a couple of years. It is important to note that the above code does not completely prevent exploiting the vulnerability: Cross site request forgery needs to be prevented, too.
Mar 8	reviewed	Approve suggested edit on Dual Linux System with Whole Disk Encryption
Mar 7	reviewed	Reviewed How do I get my Encryption Certificate back?
Mar 7	reviewed	Approve suggested edit on Open an e-mail account from only one particular system?
Mar 5	reviewed	Approve suggested edit on Does SQL Server CE 4 decrypt data securely?