126 reputation
5
bio website programmerjokes.com
location
age
visits member for 2 years, 5 months
seen Nov 13 at 0:01

I am a PHP programmer, usually makes scripts once in a while and modding scripts for fun and to ease my job.

http://programmerjokes.com http://sha512.ru


Sep
24
awarded  Autobiographer
Mar
16
comment Email activation string with MD5'd random number and email secure?
@Philippe Gray If your database is breached, you would have more issues than having the attacker mass activating your user's accounts. And, hashing the activation key won't prevent the mass activation of accounts in the case of database breach as the activation key is the "secret key" that you should keep a hold of securely. It doesn't matter of whether it is hashed or not.
Mar
16
comment Email activation string with MD5'd random number and email secure?
@Adnan, I've added some more explanations in accordance to the main topic.
Mar
16
revised Email activation string with MD5'd random number and email secure?
Added more explanations
Mar
16
comment Email activation string with MD5'd random number and email secure?
Hi, while I do agree on that, and I have already stated that it will be a bit offtopic, but if that code goes into production and it is as what I've said, then the users of his site will get hacked which is bad anyway.
Mar
15
answered Does allowing the <cite> tag create any XSS vulnerabilities?
Mar
15
answered Email activation string with MD5'd random number and email secure?
Mar
8
comment What is the security flaw in the following code?
Or if you didn't blocked search engines like Google, Bing, Yahoo from indexing that site, then probably the magic key may just appear at your Google search result :) Google Dork: site:www.host inurl:"/application?magic=" Or, if you're using other people's wifi connection and they're sniffing your http requests, they can get it easily as well.
Mar
6
awarded  Commentator
Mar
6
comment What kind of attack is this?
Let's go through Google Dork lesson #1 then. Try and search using this query and see if it is your site. google.com/search?q=filetype:php inurl:linkredirect.php?id=434
Mar
5
comment What is wrong with a confirmation page displaying my password?
Hopefully that you won't be another victim like this site: arstechnica.com/security/2013/11/…
Mar
5
answered What kind of attack is this?
Mar
5
comment What kind of attack is this?
btw, you would probably want to change the filename at your question to be more vague(change its name at here only) though, as I can find your site through a simple Google query.
Feb
2
comment Best practices for handling computer viruses
@OlegV.Volkov I think what TerryChia is talking about how can you be sure that the threats that are at your workstation are only infected with "non-crucial" malware? Malware A may download Virus B, Trojan C, Backdoor D from a remote site to the workstation to cause more infection(steal more data) and impact(chaining effect).
Feb
1
comment Android apk malware
@Ramhound I get what you mean. What I meant is that the user can be social engineered to install that app, saying that the app would give you benefits(like able to crack wifi passwords within seconds, hack facebook accounts, gmail accounts and etc) and the user will follow blindly what the app instructs.
Feb
1
comment Android apk malware
@Ramhound agreed. However, do note that there are users who will install these apps blindly on their phone without knowing the impact :)
Feb
1
comment Android apk malware
you're welcome :) Well, Android is made based on Linux, so of course it would inherit its characteristics(most if not all). Not all of the malware in Windows are self-triggered, although some are(Java driveby, autorun of virus through thumbdrive and etc). I guess that the rule of thumb is not to trust any files that you've downloaded from the Internet :)
Feb
1
answered Malware infections from visiting or using YouTube
Feb
1
comment Android apk malware
As long as it is not installed, then you will be safe as it will not self execute and it will not be able to enable 'Unknown Sources'.
Feb
1
answered Wine or sandboxie as sandboxes