Reputation
11,686
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
2 18 65
Newest
 Good Answer
Impact
~679k people reached

Oct
26
reviewed Approve How do I use “openssl s_client” to test for (absence of) SSLv3 support?
Oct
21
comment One liner to create passwords in linux?
Base64 has 64 possible characters while there are in fact 95 printable characters. Would not recommend.
Oct
21
comment One liner to create passwords in linux?
I would not use this answer because any hash-sum (md5sum, sha256sum, ...) outputs hexadecimals. They contain only 4 bits of randomness per byte while being just as hard to remember as any same-cased alphanumeric string. There are lots of packages and other ways to do this properly, even if you only use tools that are available on almost every Unix-like OS.
Oct
21
answered One liner to create passwords in linux?
Oct
20
comment is there a risk in increasing esmtp header line length against rfc5822 - asa/pix question
Well, if I was sure about an answer I would post it :). But if you test with longer headers to make sure it doesn't crash anything, it is probably okay, at least until you find out more.
Oct
20
comment is there a risk in increasing esmtp header line length against rfc5822 - asa/pix question
How about increasing the limit instead of removing it? I could imagine that a multi-gigabyte header might crash things, so setting a reasonable limit (at least for the moment) might be a good idea.
Oct
20
reviewed Approve XSS - Bypass this RegExp
Oct
18
reviewed Approve Confusion over a firewall and proxy
Oct
18
answered Gmail, Yahoo, Hotmail , and so on; How do they check the content of an attached password-protected archived file like Winrar?
Oct
17
reviewed Reject What technical reasons are there to have low maximum password lengths?
Oct
17
reviewed Approve Advice - When just starting your career, what are the best certifications to eyeball?
Oct
16
revised WiFi connection history
added 287 characters in body
Oct
16
answered Is the option to jump to blanks in password fields a security risk?
Oct
16
answered WiFi connection history
Oct
16
reviewed Approve How nmap guesses the operating system?
Oct
16
reviewed Approve SSL3 “POODLE” Vulnerability
Oct
15
comment Password recovery flow - Send Password recovery to any email?
So entering a non-registered email address would create an account for them automatically? It's sort of odd and you may want to consider whether users understand what is going on. Also, I could send lots of emails with useless links to people that never signed up for your website. Then again, you can do that with most register forms, but it's something to think about.
Oct
15
answered How to explain to a customer that spamfilters don't catch everything
Oct
14
reviewed Reject How can attackers bypass firewalls?
Oct
14
reviewed Approve I need help on how to hack into a scammer computer via IP/DNS