13,081 reputation
64667
bio website xanderland.com
location Charlotte, NC
age 37
visits member for 4 years, 1 month
seen 6 hours ago

I'm an application security architect with a consulting background in software development, enterprise architecture, and accounting.


14h
reviewed Leave Open Best Practces for Security Questions
14h
reviewed Close Decrypting packet data without private key
1d
comment Where can I download the Sony hack malware (for analysis)?
This question appears to be off-topic because it is too localized. It's not of general interest, but only of interest, and any answers are likely to rapidly go out of date as it's highly unlikely that this specific malware should it even ever be made openly available, would remain available for long.
1d
awarded  Revival
1d
reviewed No Action Needed Tails OS for Android and PC?
1d
reviewed No Action Needed Doesn't seem to be able to capture the packets I need
1d
reviewed Approve OWA Keep-Alive in http, even though it should be forced https
1d
reviewed Approve Open Problems in Security?
1d
reviewed Approve Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)
1d
reviewed Reviewed Good password hashing algorithm compatible with PHP and Linux apps
1d
reviewed Reject How can I find the process that is trying to use smtp to send email?
1d
reviewed Reject How does DNSSec work? Are there known limitations or issues?
1d
answered What documentation can I ask a vendor for to show HIPAA compliance
1d
reviewed Leave Open How to prevent outgoing UDP attacks?
1d
reviewed No Action Needed CTF competitions/challenges that are Windows based?
1d
answered Intrusion prevention in windows azure?
1d
answered Protecting a statistics endpoint
1d
comment CSRF Guard: Injects token in POST Request?
@Mike It actually does, though it's not terribly clear. I've added some specifics to my answer, and for more detail, search on inject-into-form in the documentation.
1d
revised CSRF Guard: Injects token in POST Request?
Added clarifications around POST.
1d
answered security clearance for programmers