Reputation
228
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 8
Impact
~2k people reached

  • 0 posts edited
  • 0 helpful flags
  • 22 votes cast
Aug
10
comment What certificates are needed for multi-level subdomains?
I'm seeing the same as @blueyed, browsers complain if certificates have multiple subdomain wildcards ala *.*.baz.example.com. It doesn't seem like having more than one subdomain wildcard is possible without browsers complaining.
Sep
24
awarded  Autobiographer
Jul
19
awarded  Yearling
May
12
comment How can I punish a hacker?
although no damage was done <- so what's the point in seeking punishment? pride? personally I'd be happy if someone broke onto my servers but did no damage — I can patch the vulnerability before someone else does cause damage thanks to him.
Mar
20
awarded  Popular Question
Oct
2
awarded  Commentator
Oct
2
comment In the light of recent information about RarVM, can we still trust RAR files?
The same implementation is being used by pretty much any compressing application with RAR support, isn't it? if this is the case whatever is broken "in" WinRAR will be broken in other compressors that handle RAR files.
Sep
29
awarded  Editor
Sep
29
revised In the light of recent information about RarVM, can we still trust RAR files?
edited body
Sep
29
asked In the light of recent information about RarVM, can we still trust RAR files?
Sep
20
comment How to properly secure a $_GET in PHP?
See also: stackoverflow.com/questions/60174/…
Sep
20
awarded  Nice Question
Sep
19
comment From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
@Chad nevermind to what I wrote before, I see your point.
Sep
19
comment From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Great answer! one thing missing is how exactly does the memory related to the event get overwritten between DeleteCommandTarget and Exec, which apparently is done through Javascript, this article has a good summary on that part: theregister.co.uk/2012/09/19/zero_day_ie
Sep
19
awarded  Scholar
Sep
19
accepted From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Sep
19
awarded  Student
Sep
19
revised From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
edited tags
Sep
19
asked From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Sep
7
comment How does hacking work?
(This is also one of the reasons why PHP has such a bad rep among more experienced devs)