meta user
network profile
| bio | website | faiumoni.de/de/start.html |
|---|---|---|
| location | Germany, Europe | |
| age | 32 | |
| visits | member for | 2 years, 5 months |
| seen | 6 hours ago | |
| stats | profile views | 1,603 |
My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.
|
Apr 25 |
answered | Why re-verify with CAPTCHA on failed form entry? |
|
Apr 23 |
revised |
Reject IP packets with an ICMP error, or just drop them? added 249 characters in body |
|
Apr 23 |
comment |
Reject IP packets with an ICMP error, or just drop them? While this is theoretically possible, this is an extremely inefficient way for two reasons: a) ICMP unreachable and unsolicited TCP-RST are very easily filterable at or before the victim. And b) more important: The TCP-RST und ICMP unreachable packets are very small, so the botnet needs to be extremely large. As such large botnets are expensive, an attacker will likely try to get the amplification behind the botnet for free. That's why reflection attacks without amplification are not seen in the wild. You should worry about your DNS server more than about error responses. |
|
Apr 23 |
revised |
Reject IP packets with an ICMP error, or just drop them? added 9 characters in body |
|
Apr 23 |
answered | Reject IP packets with an ICMP error, or just drop them? |
|
Apr 22 |
answered | Reasons behind MAC Spoofing on a corporate network? |
|
Apr 20 |
comment |
Where to report malicious URLs, phishing, and malicious web sites? Details on the exploit are described on blog.armorize.com/2011/04/… |
|
Apr 19 |
awarded | Electorate |
|
Apr 16 |
awarded | Citizen Patrol |
|
Apr 14 |
revised |
Topics for SecureCoding course in C added "in c" to the subject as mentioned in the body because that opens many topic that are not relevant for intepreted languages and puts less emphesis on web application vulnerabilities |
|
Apr 14 |
suggested | suggested edit on Topics for SecureCoding course in C |
|
Apr 12 |
answered | OpenSSO and Basic Auth together |
|
Apr 12 |
revised |
Is Steganography considered encryption and subject to USA export restrictions? added country name to heading |
|
Apr 12 |
suggested | suggested edit on Is Steganography considered encryption and subject to USA export restrictions? |
|
Apr 10 |
comment |
Looking for example of well-known app using unsalted hashes It was around the time that "phase3" was given the name MediaWiki. But it took months (might be even two years) until that option was enabled on Wikipedia itself. |
|
Apr 9 |
revised |
Setup and record outbound traffic from a botnet in a sandbox/secure environment edited tags |
|
Apr 9 |
answered | Looking for example of well-known app using unsalted hashes |
|
Apr 9 |
comment |
Can a mobile phone battery contain malware? @Hugh Allen, i'd be primary concerned about buying stolen goods. |
|
Apr 9 |
revised |
Web Security Cheatsheet / ToDo list edited tags |
|
Apr 9 |
answered | Web Security Cheatsheet / ToDo list |
