Reputation
11,656
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
2 18 65
Newest
 Good Answer
Impact
~677k people reached

Oct
28
reviewed Approve rdp tag wiki excerpt
Oct
28
reviewed Reject Why has the NSA had a hand in deciding on encryption standards?
Oct
27
reviewed Approve Does public key auth in SSH prevent most MITM attacks?
Oct
24
comment Some questions about port-scans
@Inquisitive Since the default is to not respond (on most consumer routers), yes, that is usually the case. I'm glad you found the explanation useful!
Oct
24
reviewed Approve Is using bcrypt on existing SHA1 hashes good enough when switching password implementation?
Oct
24
reviewed Reject How and when do I use HMAC?
Oct
23
answered Some questions about port-scans
Oct
19
reviewed Approve MITM attack between me and TOR entry node
Sep
16
reviewed Approve Masking credit cards PAN with zeros
Sep
8
comment What is the security flaw in the following code?
"Stored password is compared against clear-text password provided by user" I have never heard that this is a bad practice. Perhaps if the password propagates through a network or system to finally be checked, you might want to encrypt or hash it for transport, but other than that... if you didn't hash it client side (hello, mobile app developers!) there is usually little point in hashing it and then using it right after. Still, an upvote, you didn't say anything incorrect and there are some good points :)
Sep
6
reviewed Approve Would it be possible to have a javascript observatory, stricter sandboxing and stricter CSP (Content Security Policy) for Tor?
Sep
5
reviewed Approve How to use the standard (non-dictionary) brute force attack on FTP in THC-Hydra?
Sep
4
reviewed Approve Question about ISO 27001:2013 scope definition
Aug
29
reviewed Approve Does WhatsApp disclose the sender's IP address?
Aug
27
reviewed Approve Is a server infrastructure fundamentally possible which the smartest person can't breach?
Aug
25
awarded  Good Answer
Aug
17
reviewed Approve How does Windows 10 allow Microsoft to spy on you?
Aug
17
reviewed Approve imap tag wiki
Aug
17
reviewed Approve imap tag wiki excerpt
Aug
16
reviewed Approve Is there any technical security reason not to buy the cheapest SSL certificate you can find?