28,015 reputation
22766
bio website
location Troy, NY
age 30
visits member for 1 year, 11 months
seen 1 hour ago

4h
reviewed Close Is there a GPG-compatible tool that downloads all the keys that have signed some of my downloaded keys?
4h
reviewed Close If you have option to choose between static code analysis vs dynamic code analysis which one would you pick and why?
4h
reviewed Close Printer SSL certificates
4h
reviewed Close Sandbox environment for “php malware” analysis
2d
reviewed Close Application security training for developers
2d
reviewed Close Identifying/decrypting hashed/encrypted data
2d
comment How can I prevent my database from being compromised if my CakePHP app is compromised?
@Dominicp yes, if you decrypt on the server then a persistent attack is still a problem, but it still prevents mass compromise of anything not accessed. If you really need Max security you could have decryption done client side but that'd be tricky.
Aug
18
answered Can I change the CSR of my SSL certificate?
Aug
18
reviewed Close Browser logs into forum with completely unknown credentials
Aug
18
reviewed Close bypassing same origin policy for xss
Aug
18
answered Does routing/proxying through a mobile-broadband gateway provide anonymity?
Aug
18
revised Does routing/proxying through a mobile-broadband gateway provide anonymity?
edited title
Aug
18
reviewed Leave Open Does routing/proxying through a mobile-broadband gateway provide anonymity?
Aug
18
answered Penetration testing preventive or detective control?
Aug
18
reviewed Leave Open Penetration testing preventive or detective control?
Aug
18
reviewed Close Authentication of temporary worker without a badge (physical security)
Aug
18
reviewed Close how to tell if a user has a certain product
Aug
18
reviewed Leave Open Metcalfe's law: infuence on security of software
Aug
18
reviewed Close How can I decode/find the file type if there is no file extension (e.g. only binary data )?
Aug
18
reviewed Close Has anyone implemented secure practices with Docker and Vagrant?