223 reputation
18
bio website
location
age
visits member for 2 years, 5 months
seen yesterday

Currently building a web app. I'm at SO/SE sites with the goal of learning something new every day.

Things I like/use include: camelCase, OOP, HTML(5), CSS(3), PHP(5), (My)SQL, PDO, xdebug, APC, XHPRof, Javascript, jQuery + jQuery UI, JSON, redis, Git, PHPUnit, node.js, Twitter Boostrap, Modernizr, Common sense

Things I dislike/don't use include: under_scores, XML, spaghetti code, gotos, architecture astronauts, etc

I also used to do: VB6, VB.NET, C/C++, x86 Assembly, Motorola 68K Assembly; but I forgot most of it since I haven't touched them in years.

Like my stuff? A couple of mBTCs are always welcome: 19xQFJabE9ga4kjnKTV94JTirnjy9TKNN9


Sep
24
awarded  Autobiographer
Jul
19
awarded  Yearling
May
12
comment How can I punish a hacker?
although no damage was done <- so what's the point in seeking punishment? pride? personally I'd be happy if someone broke onto my servers but did no damage — I can patch the vulnerability before someone else does cause damage thanks to him.
Mar
20
awarded  Popular Question
Oct
2
awarded  Commentator
Oct
2
comment In the light of recent information about RarVM, can we still trust RAR files?
The same implementation is being used by pretty much any compressing application with RAR support, isn't it? if this is the case whatever is broken "in" WinRAR will be broken in other compressors that handle RAR files.
Sep
29
awarded  Editor
Sep
29
revised In the light of recent information about RarVM, can we still trust RAR files?
edited body
Sep
29
asked In the light of recent information about RarVM, can we still trust RAR files?
Sep
20
comment How to properly secure a $_GET in PHP?
See also: stackoverflow.com/questions/60174/…
Sep
20
awarded  Nice Question
Sep
19
comment From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
@Chad nevermind to what I wrote before, I see your point.
Sep
19
comment From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Great answer! one thing missing is how exactly does the memory related to the event get overwritten between DeleteCommandTarget and Exec, which apparently is done through Javascript, this article has a good summary on that part: theregister.co.uk/2012/09/19/zero_day_ie
Sep
19
awarded  Scholar
Sep
19
accepted From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Sep
19
awarded  Student
Sep
19
revised From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
edited tags
Sep
19
asked From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Sep
7
comment How does hacking work?
(This is also one of the reasons why PHP has such a bad rep among more experienced devs)
Sep
7
comment How does hacking work?
For example, if you visit the feed of questions of the PHP label at Stack Exchange at any given point, and this is very real, some 40 to 50% of the new questions on the first page will contain a php+mysql combination that is vulnerable to sql injections — and it's not rare for this kind of code to be found in small/medium sized businesses (until it breaks, of course)