193 reputation
19
bio website debiki.com
location Gothenburg, Sweden
age 35
visits member for 2 years, 7 months
seen Sep 6 at 13:30

Software developer. On my spare time I'm sometimes building a hopefully better discussion system for blogs and forums:

About: http://www.debiki.com
Demo: http://www.debiki.com/demo/-71cs1-demo-page-1

All original source snippets that I post on StackOverflow and StackExchange sites are licensed under Creative Common's CC0 (in addition to the license prescribed by StackOverflow.)


Sep
24
awarded  Autobiographer
Jul
27
awarded  Curious
Jul
26
revised Am I understanding correctly how to stop a certain OAuth2 session fixation attack?
deleted 56 characters in body
Jul
26
asked Am I understanding correctly how to stop a certain OAuth2 session fixation attack?
Jun
3
awarded  Nice Question
Mar
2
comment Store which parts of an IP address, for user to remain anonymous?
@KnightOfNi The thing I mentioned happened in Germany. (I did mention that originally, but then I edited the comment and accidentally removed that piece of info)
Mar
2
comment Store which parts of an IP address, for user to remain anonymous?
@KnightOfNi Someone posted in a forum that he had downloaded videos illegally. He was renting a room. The apartment owner got fined because of the videos, and he became very angry. I'm thinking the videos were tracked via the IP number. — I suppose rules vary from country to country.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@Anti-weakpasswords Now I'm thinking about using in-memory bloom filters to prevent anonymous users from voting many times. The bloom filters could be reset every second day, for example. — Since the bloom filters were stored in memory only, then, if anyone was able to access them, then s/he already had access to the whole system anyway. — What do you think about an anonymous forum that uses in-memory bloom filters to prevent vote fraud? — Perhaps easiest/safest to not allow anonymous users to vote at all.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@Anti-weakpasswords Yes I'm feeling it was not a good idea with semi-anonymous accounts that store cookies and fingerprints but no IP numbers. — Anonymous votes + non-anonymous votes is an interesting / good idea I think.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@ack__ Perhaps it'd be better if I simply did not allow anonymous users to vote. Then I needn't remember any data at all on anonymous users. Or, now it's getting complicated, but there could be two levels of anonymity: one that's totally anonymous and isn't allowed to vote (only allowed to add comments). And one fairly anonymous alternative, which may vote.
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
@Anti-weakpasswords I was thinking about using cookies and browser fingerprints. — If people got access to the database, they wouldn't be able to identify anyone, because the cookies and fingerprints wouldn't map to any IP number or email address or anything. However (!) if someone got access to your computer and to the database, they'd be able to link your computer to your activity in the database. So you would be anonymous only as long as both your computer and the database weren't compromised / seized / stolen. — Do you think this makes sense for an anonymous forum?
Mar
1
revised Store which parts of an IP address, for user to remain anonymous?
edited body
Mar
1
comment Store which parts of an IP address, for user to remain anonymous?
Related question: security.stackexchange.com/q/18123/9487
Mar
1
asked Store which parts of an IP address, for user to remain anonymous?
Aug
27
awarded  Notable Question
May
7
accepted Simple and secure remote installation method that accepts input via a web page?
May
7
comment Simple and secure remote installation method that accepts input via a web page?
Thanks! I'll probably take the automatically generated password.php approach, i.e. generated via the allocation/installation script. (Although it's Scala not PHP in my case). And then have the user include the password via a magic URL (which would be valid only before the installation).
May
7
comment Simple and secure remote installation method that accepts input via a web page?
@Adnan I've suggested some solutions, and actually I was wondering if I had suggested all "good" solutions and if this question was unnecessary. Still Iseri posted a different solution (below) that I had not thought about.
May
7
comment Simple and secure remote installation method that accepts input via a web page?
@Adnan You think it rather belongs to StackOverflow or some other site?
May
7
comment Simple and secure remote installation method that accepts input via a web page?
@Adnan "Is it possible to let the admin (i.e. the user that installs the software) define admin username and password via a HTML page, in a secure manner?", + how