This account is temporarily suspended to cool down. The suspension period ends on Jul 3 '26 at 18:01.

Andrew Smith

1 reputation

111

bio	website
	location
	age
visits	member for	11 months
	seen	Apr 12 at 13:22
stats	profile views	541

	1 reputation	bio	website		visits	member for	11 months
111 badges		location			seen	Apr 12 at 13:22

summary answers questions tags badges favorites bounties reputation activity

501 Actions

suggestions reviews revisions comments badges posts accepts all

Nov 6	awarded	Popular Question
Oct 24	answered	Good steps to survive from denial-of-service attack (DoS attack)
Oct 24	comment	Are there really functioning quantum computers? A bit off-topic: there is more and more evidence that the brain is actually working like quantum computer in way it process the information. This way, everything can be considered to be quantum computer. So basically making quantum computers is like making the nature again, no difference.
Oct 24	comment	How to fight browser fingerprinting? @Polynomial this works without disabling js, so you can work like normal.
Oct 24	comment	How to fight browser fingerprinting? @HendrikBrummermann Ha ha ha. You need to think like an analyst - if you dont keep the same ip number, dont keep same subnet, dont keep the user agent - in practice, it's impossible to track you over all ways are in use today (ads, network). It's practically proven to work very well.
Oct 23	answered	How to hack linux via Local File Inclusion vulnerability?
Oct 23	comment	How to hack linux via Local File Inclusion vulnerability? Brilliant. Actually I hacked this way questions for my diploma exam :P
Oct 23	revised	How to fight browser fingerprinting? added 1032 characters in body
Oct 23	answered	How to fight browser fingerprinting?
Oct 23	comment	How do I find all domains hosted on a single host? You can try reverse lookup. If webserver address is 1.2.3.4 you can try `host 1.2.3.4 1.2.3.4` and that could reveal all the websites hosted on that ip, for example ispconfig by default configures reverse DNS, as well many other hosting systems as well windows active directory.
Oct 23	answered	What are the security or privacy issues with allowing users to forward email from our Google Apps account to their personal Gmail?
Oct 23	accepted	Why is Message Labs sending mail in plaintext?
Oct 23	answered	Vuln Web App which includes LDAP Injection?
Oct 22	comment	Can I extend the validity of a nonce-code? Sorry, but this makes nonce-sense... Could you post your HTML so we can have a look, pls. Also HTML only token is quite weird, would you draw the diagram or workflow that would be more useful. Thanks.
Oct 21	answered	Are open redirects a security concern?
Oct 21	comment	How to hack linux via Local File Inclusion vulnerability? You would need to upload code, and execute it. You can upload code via page, thru log-files etc, maybe you can find exploit example thru logfiles. You would include the logfile, and inside of it, you would place the PHP code with `<?php ?>` thing which would run exploit.
Oct 20	comment	Long running SMTP session Just blacklist them one way or another :-) `iptables` should do the trick
Oct 20	revised	Why is Message Labs sending mail in plaintext? added 29 characters in body
Oct 20	asked	Why is Message Labs sending mail in plaintext?
Oct 19	comment	Can malware on my computer infect my phone? If your mobile runs windows xp, than definitely yes. In any other case, the update process is quite OK, but making some jpeg which runs shellcode from the photofolder is just a matter of time. Anyway, cross-platform ways are very rare, and running exploits from mobiles against pcs seems difficult, because you cant compile it just like that on iphone, you need to download it and bypass protections.