208 reputation
18
bio website
location Denmark
age 26
visits member for 2 years, 3 months
seen Sep 4 at 13:35

I am a fulltime webdeveloper, working with PHP and MySQL.


Sep
24
awarded  Autobiographer
Jul
24
awarded  Yearling
Jul
17
awarded  Student
Jul
17
comment Authenticating REST API using Access Token
But it's okay, that the key can be used more than once? I mean, doesn't this leave me wide open to MITM attacks?
Jul
17
asked Authenticating REST API using Access Token
Jan
23
awarded  Critic
Jan
23
comment is it easier to get the original password if you have multiple hashes of it?
If the three types of hashes differ in strength, then the weakest hash algorithm will prove easier to crack, no matter the strength of the password.
Dec
10
comment How are CVE identifiers assigned and managed?
Does this site help you out? cve.mitre.org/cve/identifiers/build.html
Dec
4
comment Dealing with a (possible) virus on both MacOSX and iOS
If your iPhone starts acting weird, when it gets back on the WIFI, you should check your router, and see if it's been compromised, or any DNS rules have been added.
Dec
3
comment Dealing with a (possible) virus on both MacOSX and iOS
Does your iPhone also redirect, if it's not connected to WIFI?
Dec
3
answered Dealing with a (possible) virus on both MacOSX and iOS
Nov
13
comment Creating Secure PHP Sessions
What if the session expires and someone has the random string from the cookie? Blocking out by IP is not secure, and to my knowledge, neither is the cookie.
Nov
5
comment Infection I can't shut down, disguises process as scvhost.exe
Trusting AV is like trusting that you can't die in a car crash, just because you wear a seat belt
Nov
2
comment When using AES and CBC, is it necessary to keep the IV secret?
@Polynomial Thank you for the clarification.
Nov
2
comment When using AES and CBC, is it necessary to keep the IV secret?
@D.W. What does truly random mean?
Nov
1
comment Iframe javascript Keylogger
My point was, don't think that because you're using this technique, you're home free, and don't have to care about XSS vulnerabilities.
Oct
31
comment Iframe javascript Keylogger
But frame busting is not reliable, if you have a XSS vulnerability, as you can, in IE8 and Chrome, use the XSS filter to destroy it.
Sep
27
awarded  Scholar
Sep
27
accepted Trusted device web application
Sep
27
comment Trusted device web application
Thank you for this. Your post got me thinking, and I think I've found a way to make it all happend, safely. :)