168 reputation
6
bio website
location Russia
age 32
visits member for 2 years, 1 month
seen Jul 1 at 12:39

Aug
31
answered Current best practices to prevent persistent XSS attacks
Aug
30
comment Requiring regular password change but storing previous paswords?
@ewanm89, I consider this part of 'more information about real "in-the-wild" passwords'. I've added a little clarification.
Aug
30
revised Requiring regular password change but storing previous paswords?
added 24 characters in body
Aug
30
answered Requiring regular password change but storing previous paswords?
Aug
8
awarded  Citizen Patrol
Jul
31
awarded  Teacher
Jul
31
awarded  Editor
Jul
31
revised Custom font protection?
added 107 characters in body
Jul
31
answered Custom font protection?
Jul
31
comment “Username and/or Password Invalid” - Why do websites show this kind of message instead of informing the user which one was wrong?
Even if system allows to check if account exists in some other way, this would still slow down bruteforcing by amount of those requests.
Jun
21
awarded  Supporter