| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 9 months |
| seen | May 16 at 7:10 | |
| stats | profile views | 7 |
What about me? I'm just a bug in the matrix
|
May 15 |
comment |
Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running? Bastille looks awesome, but hasn't been in active development since about 7 years if I gather the information from their site correctly. |
|
Feb 21 |
revised |
Dynamic tools to detect vulnerabilities in software applications written in c? improve answer |
|
Feb 21 |
answered | Dynamic tools to detect vulnerabilities in software applications written in c? |
|
Dec 11 |
accepted | Forefront Identity Management Server Hardening |
|
Dec 11 |
awarded | Citizen Patrol |
|
Dec 11 |
accepted | Two-Factor Authentication: When is it worth it? |
|
Dec 4 |
awarded | Quorum |
|
Nov 30 |
asked | Forefront Identity Management Server Hardening |
|
Nov 29 |
revised |
What approaches are to detect DoS attack in IDS/Firewall? grammer made it difficult to understand (and hence answer), tried to improve understandability |
|
Nov 29 |
suggested | suggested edit on What approaches are to detect DoS attack in IDS/Firewall? |
|
Nov 29 |
comment |
What approaches are to detect DoS attack in IDS/Firewall? Is your question about DoS or also about DDoS? |
|
Nov 28 |
comment |
Two-Factor Authentication: When is it worth it? Sorry, my answer wasn't very clear in the beginning. I hope it's better understandable now. |
|
Nov 28 |
comment |
Two-Factor Authentication: When is it worth it? exactly. I've edited it for better understanding. |
|
Nov 28 |
revised |
Two-Factor Authentication: When is it worth it? clarification |
|
Nov 28 |
asked | Two-Factor Authentication: When is it worth it? |
|
Nov 28 |
answered | Improve SSH logs |
|
Nov 28 |
answered | IIS and SQLServer Hardening |
|
Nov 19 |
comment |
What XSS attacks doesn't “Reflective XSS Protection” defeat? "So what I guess what I'm really interested to know is are there any evasion techniques that mean that by design reflective XSS protection won't work?" AndySmith - maybe you should phrase your question that way then. |
|
Nov 16 |
awarded | Commentator |
|
Nov 16 |
comment |
What XSS attacks doesn't “Reflective XSS Protection” defeat? There is a finite anount of characters, so if one considers all possibilities, you could escape all. That is not design but implementation though. But there is ongoing research in this field. If therr would've been an easy design change or possibility we wouldn't be facing this amount of xss on the net. For right now it depends on the quality of the implementation. |