25,599 reputation
862126
bio website ayrx.me
location Singapore
age 20
visits member for 2 years, 7 months
seen 6 hours ago

This is not the profile you are looking for.


Jun
4
comment What are the statistics on how often client form submissions fail CAPTCHAs?
I don't have any statistics so I'm not gonna answer. "Is the likelihood of failure high enough to justify the effort of deploying the CAPTCHA?" This really is a moot point though imo. Most web application frameworks have libraries that make adding captchas as simple as a one or two lines of code. It really is a matter of usability when it comes to deploying captchas.
Jun
3
comment Should I put a potentially insecure program online?
Do you want to release your program as a download/source code for people to run or are you actually hosting your application somewhere for users upload code? If it's the former I'll go ahead and release it with a warning of potential security issues.
May
28
comment How can I determine the encryption used by knowing input and result?
I'm not sure what you want... Like the answers on that question you linked to suggest, there is no good way to do it...
May
27
comment What is the security purpose behind the “enable editing” of MS Word?
I wonder how many people actually evaluate the contents of the file before clicking enable. I know I certainly don't.
May
26
comment Virus affecting MS Office files
@ScottPack Why do you feel the need to deny it unless you are guilty of something?
May
21
comment Ways to look for changes on a PC
They secretly installed Skynet on your computer so it will take over the world in 10 years.
May
21
comment Is KeePass a good defense against keyloggers?
I can think of another strong defense against keyloggers. You know... don't get a keylogger in the first place! :)
May
18
comment User entered Javascript security implications
possible duplicate of User entered Javascript security implications
May
18
comment What do web trackers know about/think of me?
They think you are hawt obviously.
May
18
comment How to prevent restrict access to a web application to authorized devices only?
@user1650894 Updated.
May
14
comment How can I send and receive untraceable emails?
Call the police...
May
13
comment How can I punish a hacker?
@hydroparadise If you live in the USA and a robber robs your house you report it to the local corps. What happens if you live in the USA, host your website using a server located in a datacenter in Japan, was attacked by a French hacker using a compromised machine in China? Who do you report it to? Which law enforcement agency is going to arrest the guy?
May
12
comment Why is WPA Enterprise more secure than WPA2?
@Unw0und No, EAP is an authentication protocol while TKIP and CCMP is an encryption protocol.
May
10
comment Is salting a hash really as secure as common knowledge implies?
@ThomasAndreèLian IF you want to learn, pick a known good algorithm like bcrypt and implement it yourself. This has two advantages - 1) You actually learn something useful. 2) You get test cases which you can use to verify if your implementation is broken.
May
9
comment Are there any Windows permissions management applications?
@BradJanke I'm not sure if they have the exact equivalent. I'm more of a linux guy myself so I'm not very familiar with the commands. They do have commands that will allow you to accomplish similar goals though. It's worth taking the effort to learn it if you are going to be doing a lot of Windows administration work.
May
8
comment CAPTCHA Weakness to Automated Attack
No dude... I said they prevented online attacks.....
May
7
comment HTTPS firewall rule
Just set the firewall on your client to accept packets with source port 443 and drop the rest....
May
7
comment How to encrypt data on the server?
What exactly is your threat model?
May
7
comment How does Google Authenticator work?
@MarioAwad The answer to that can be found on the HOTP RFC, section 7.4. ietf.org/rfc/rfc4226.txt
May
2
comment US Department of Labor Watering Hole Attack
@John You can be surprised how powerful JS can be especially if there exist vulnerabilities in the browser that allows JS to break out of the sandbox.