391 reputation
316
bio website
location Switzerland
age
visits member for 2 years, 11 months
seen yesterday

Nov
28
answered IIS and SQLServer Hardening
Nov
19
comment What XSS attacks doesn't “Reflective XSS Protection” defeat?
"So what I guess what I'm really interested to know is are there any evasion techniques that mean that by design reflective XSS protection won't work?" AndySmith - maybe you should phrase your question that way then.
Nov
16
awarded  Commentator
Nov
16
comment What XSS attacks doesn't “Reflective XSS Protection” defeat?
There is a finite anount of characters, so if one considers all possibilities, you could escape all. That is not design but implementation though. But there is ongoing research in this field. If therr would've been an easy design change or possibility we wouldn't be facing this amount of xss on the net. For right now it depends on the quality of the implementation.
Nov
16
awarded  Teacher
Nov
16
answered Is it safe to use a weak password as long as I have two-factor authentication?
Nov
16
answered What XSS attacks doesn't “Reflective XSS Protection” defeat?
Oct
23
accepted Security Concerns with TCP Forwarding
Oct
18
asked Security Concerns with TCP Forwarding
Oct
18
awarded  Supporter
Oct
1
accepted Changing IP ID generation of a server
Sep
28
comment Changing IP ID generation of a server
"you could set it to 0" - that's what I'd like to do, but I don't know how.
Sep
28
revised Changing IP ID generation of a server
improve question (add example)
Sep
28
asked Changing IP ID generation of a server
Aug
22
comment Why should every file have a user and a group?
but how does that affect security? From your answer it looks like the only downside is, that a user gets the files of another user (which is bad, but still, I was wondering if there are bigger implications)
Aug
20
revised Why should every file have a user and a group?
hopefully better understandable
Aug
20
accepted Any reasons to why not use randomize_va_space?
Aug
20
asked Any reasons to why not use randomize_va_space?
Aug
20
comment Why should every file have a user and a group?
thanks, enforcing file premissions was what I was looking for.
Aug
20
accepted Why should every file have a user and a group?