220 reputation
129
bio website debiki.com
location Gothenburg, Sweden
age 35
visits member for 3 years, 3 months
seen Jun 21 at 10:07

Software developer. On my spare time I'm sometimes building a hopefully better discussion system for blogs and forums:

About: http://www.debiki.com
Demo: http://www.debiki.com/demo/-71cs1-demo-page-1

All original source snippets that I post on StackOverflow and StackExchange sites are licensed under Creative Common's CC0 (in addition to the license prescribed by StackOverflow.)


Jul
18
awarded  Famous Question
Jun
1
comment Can client-side hashing reduce the denial-of-service risk with slow hashes?
You mean the client sends bcrypt(salt, password) not bcrypt(password) right? (in your solution paragraph no. 2) Feel I'd better ask even if I feel fairly certain
Apr
6
revised Store which parts of an IP address, for user to remain anonymous?
added 72 characters in body
Apr
6
revised Store which parts of an IP address, for user to remain anonymous?
added 400 characters in body
Apr
6
revised Store which parts of an IP address, for user to remain anonymous?
added 245 characters in body
Apr
6
answered Store which parts of an IP address, for user to remain anonymous?
Mar
14
accepted Store which parts of an IP address, for user to remain anonymous?
Feb
16
awarded  Yearling
Sep
24
awarded  Autobiographer
Jul
27
awarded  Curious
Jul
26
revised Am I understanding correctly how to stop a certain OAuth2 session fixation attack?
deleted 56 characters in body
Jul
26
asked Am I understanding correctly how to stop a certain OAuth2 session fixation attack?
Jun
3
awarded  Nice Question
Mar
2
comment Store which parts of an IP address, for user to remain anonymous?
@KnightOfNi The thing I mentioned happened in Germany. (I did mention that originally, but then I edited the comment and accidentally removed that piece of info)
Mar
2
comment Store which parts of an IP address, for user to remain anonymous?
@KnightOfNi Someone posted in a forum that he had downloaded videos illegally. He was renting a room. The apartment owner got fined because of the videos, and he became very angry. I'm thinking the videos were tracked via the IP number. — I suppose rules vary from country to country.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@Anti-weakpasswords Now I'm thinking about using in-memory bloom filters to prevent anonymous users from voting many times. The bloom filters could be reset every second day, for example. — Since the bloom filters were stored in memory only, then, if anyone was able to access them, then s/he already had access to the whole system anyway. — What do you think about an anonymous forum that uses in-memory bloom filters to prevent vote fraud? — Perhaps easiest/safest to not allow anonymous users to vote at all.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@Anti-weakpasswords Yes I'm feeling it was not a good idea with semi-anonymous accounts that store cookies and fingerprints but no IP numbers. — Anonymous votes + non-anonymous votes is an interesting / good idea I think.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@ack__ Perhaps it'd be better if I simply did not allow anonymous users to vote. Then I needn't remember any data at all on anonymous users. Or, now it's getting complicated, but there could be two levels of anonymity: one that's totally anonymous and isn't allowed to vote (only allowed to add comments). And one fairly anonymous alternative, which may vote.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@Anti-weakpasswords I was thinking about using cookies and browser fingerprints. — If people got access to the database, they wouldn't be able to identify anyone, because the cookies and fingerprints wouldn't map to any IP number or email address or anything. However (!) if someone got access to your computer and to the database, they'd be able to link your computer to your activity in the database. So you would be anonymous only as long as both your computer and the database weren't compromised / seized / stolen. — Do you think this makes sense for an anonymous forum?
Mar
1
revised Store which parts of an IP address, for user to remain anonymous?
edited body