Reputation
341
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 2 12
Newest
 Commentator
Impact
~25k people reached

  • 0 posts edited
  • 1 helpful flag
  • 25 votes cast
Dec
26
awarded  Commentator
Dec
26
comment How does Karma's open WiFi network successfully protect its users?
No one commented on the fact that the captive portal login page is coded to pull from http (unencrypted) websites, and that you're logging in over an unsecured WiFi hotspot? This seems like it's extremely exploitable to steal your login credentials if someone catches you logging in and can inject JS.
Dec
24
revised How does Karma's open WiFi network successfully protect its users?
added 348 characters in body
Dec
24
asked How does Karma's open WiFi network successfully protect its users?
Sep
21
awarded  Popular Question
Jul
11
awarded  Famous Question
Jan
22
comment How to test backend virus behavior?
I don't have the capability to disable the virus scanner on my client because I don't have admin rights on the client. And anyway, since I have Fiddler, I can just inject the contents into the HTTP stream. What I need are the contents to be arranged in such a way that the magic number is there in the file, yet some fake virus payload is still contained in the file. EICAR doesn't work because virus scanners will not detect EICAR unless it's at the start of the file (this is an intended feature of virus scanners' EICAR detection, otherwise you'd get a virus popup for loading a webpage with it)
Jan
22
asked How to test backend virus behavior?
Jan
13
accepted Apparently PayPal-affiliated site with very suspect security
Oct
23
awarded  Critic
Jul
1
awarded  Notable Question
Jun
20
revised “No identity information” alert on gmail
added 60 characters in body
Jun
20
answered “No identity information” alert on gmail
Apr
11
awarded  Popular Question
Apr
11
comment Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?
From a practical perspective, the most common way to exfiltrate data for a malicious client-side program running with user trust is to (1) capture keystrokes, and (2) send them to a remote server. Both LastPass and Chrome (and any other system involving passwords whatsoever) are wholly and completely vulnerable to this technique. You type your password and you're owned.
Apr
10
revised Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?
added 8 characters in body
Apr
10
answered Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?
Mar
20
awarded  Nice Question
Jan
24
awarded  Yearling
Jan
24
revised What are the major security concerns for smartphones?
added 838 characters in body