Hendrik Brummermann

15,642 reputation

23483

bio	website	faiumoni.de/de/start.html
	location	Germany, Europe
	age	32
visits	member for	2 years, 5 months
	seen	2 days ago
stats	profile views	1,595

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.

	15,642 reputation	bio	website	faiumoni.de/de/start.html	visits	member for	2 years, 5 months
23483 badges		location	Germany, Europe		seen	2 days ago

summary answers questions tags badges favorites bounties reputation activity

1,396 Actions

suggestions reviews revisions comments badges posts accepts all

Feb 13	comment	Is there a difference between GET and POST for web application security? Cross site POST request are not much harder then cross site GET requests. Especially if JavaScript is enabled, the form can be submitted without any user interaction at all.
Feb 12	reviewed	Reject suggested edit on How many authentication factors are there?
Feb 11	reviewed	Approve suggested edit on Our logs showing a lot of SSH brute force attacks originating on Port 11
Feb 9	reviewed	Approve suggested edit on Brute Forcing Password to a Truecrypt-encrypted file with Partial Knowledge
Feb 8	reviewed	Approve suggested edit on How to avoid to lose data encrypted because it was encrypted by no longer supported software?
Feb 7	reviewed	Edit suggested edit on Is XSS possible here? Challenge
Feb 7	revised	Is XSS possible here? Challenge formating and correcting
Feb 7	comment	Why are vulnerabilities and lack of security possible in computers? While the Harvard Architecture prevents the direct interpretation of data as program code, it does not help against logic bugs, ill interpretation of data or integer overflows.
Feb 4	comment	Received a Kindle from a stranger, what are the risks? @AJHenderson, Kindle does read you. Have a look at the ToS. Amazon does keep very detailed records of your reading habits.
Feb 3	reviewed	Satisfactory Is it possible to boot into root's /bin/bash on a LUKS encrypted device?
Feb 3	revised	Is it useful to determine the name of the server software while doing a penetration test? edited title
Feb 3	reviewed	Needs Improvement Is it useful to determine the name of the server software while doing a penetration test?
Feb 3	awarded	Custodian
Feb 3	reviewed	Satisfactory Security tradeoffs of pathname-based MAC (e.g., TOMOYO, grsecurity, AppArmor, …)
Feb 3	reviewed	Excellent How much should I care about the iOS/Android version when pentesting mobile app?
Feb 2	reviewed	Approve suggested edit on After How Much Data Encryption (AES-256) we should change key?
Feb 2	comment	How does the Yahoo webmail exploit work? What browser and which version are you using?
Feb 2	revised	How does the Yahoo webmail exploit work? edited title
Feb 2	revised	How does the Yahoo webmail exploit work? edited title
Jan 31	reviewed	Approve suggested edit on Can an attacker reuse stolen SSL private key to recreate that domain on his server