Reputation
30,035
Next tag badge:
93/100 score
19/20 answers
Badges
10 76 151
Newest
 Good Answer
Impact
~1.8m people reached

Dec
18
answered How to detect changes to client
Dec
17
reviewed Close Password management
Dec
17
comment Challenges in authentications
@user2315 Thomas Pornin says otherwise. security.stackexchange.com/a/3213/10211
Dec
17
answered Challenges in authentications
Dec
17
comment Does Google/Dropbox/Github Two-Step Verification count as Two-Factor?
"Devices and tokens that implement TOTP (Yubikey, Google Authenticator app) are designed to protect the secret key against extraction." - Not true. The Google Authenticator app merely stores the key in an sqlite database.
Dec
16
comment Getting rid of trojans on Windows XP - the basic toolkit
download.fedoraproject.org/pub/fedora/linux/releases/19/Live/…
Dec
16
reviewed No Action Needed WiFi Direct/WPS key question
Dec
16
revised How secure is XMPP with self-signed SSL certificates?
deleted 11 characters in body
Dec
16
revised How stack smashing is prevented?
deleted 18 characters in body
Dec
16
revised How does google docs know password for published googledocs document on a public site?
deleted 11 characters in body
Dec
16
revised Can a physican website be on a non-HIPAA server?
deleted 38 characters in body
Dec
16
revised loop-aes or dm-crypt for linux hard encryption?
deleted 8 characters in body
Dec
16
revised How do you limit javascript api to a domain?
deleted 32 characters in body
Dec
16
reviewed Reject Is it bad practice to use your real name online?
Dec
16
reviewed Close How much does a security audit cost?
Dec
16
reviewed Leave Open “Scanner” tab disabled in Burp Suite
Dec
14
revised Does an email signature increase security?
edited body
Dec
12
comment What is mutation XSS (mXSS)?
@cengizUzun I can't recall, but I think yes, if the textarea in question is being used by code calling .innerHTML
Dec
12
reviewed Close How secure are the new TLDs ( .us, .io, …) and do they compare to .com?
Dec
12
answered My Email Security is Low