Reputation
377
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 10
Newest
 Editor
Impact
~4k people reached

Dec
1
comment Have weaknesses in SHA-1 and MD5 ever actually been successfully used in an attack?
evilize library (not quite an actual attack though but shows how practical it is)
Nov
27
comment Best way to administer all my passwords
Not only that, if you extract it, you're going to leave traces of the plaintext file on disk and you'll have to perform secure erases all the time (assuming your hard disk isn't encrypted). Worse, if you extract it in a folder sync'd to Dropbox, it'll also sync the plaintext file up to Dropbox.
Oct
19
comment Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?
Depending on who you're trying to defend against, have a look at the demo for HSTS super-cookies. It's a bit of a dilemma since fixing it involves a trade-off between security and privacy.
Oct
19
comment Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?
Don't forget the latest dilemma in browser security, HSTS tracking.
Oct
19
comment Is there any way to safely examine the contents of a USB memory stick?
That won't protect you from something like the USB killer device.
Aug
22
comment Why not create your own encryption?
@user158421 just because you can't break it yourself doesn't mean someone else smarter than you can't either.
Aug
5
answered Does using FreeDNS introduce a security risk?
Jul
31
comment Is this code javascript vulnerable to DOM based XSS?
Without looking at the rest of the application, I wouldn't be so quick to say it's definitely vulnerable.
Jul
22
comment What kind of attacks do Javascript WebWorkers protect against?
I had a quick look at WebWorker and it doesn't look like a security feature? AFAIK, it's a way to implement background tasks. Possibly related: stackoverflow.com/questions/16600607/…
Jul
19
awarded  Editor
Jul
19
revised Can I connect to a network without being detected?
fixed grammar
Jul
19
suggested approved edit on Can I connect to a network without being detected?
Jun
24
awarded  Citizen Patrol
Jun
24
comment Chaining VPNs to increase privacy?
What you described sounds similar to (but not strictly the same as) the onion router Tor uses. I'm guessing the Tor network also depends on the fact that it's impractical to sub-peona the whole chain of ISPs across the globe.
May
28
comment Why use Keepass, etc. if all your passwords are in one place?
@Chloe that's certainly a risk that should be considered. Personally, I don't use LastPass for this very reason (and prefer to opt for software like 1Password). However, this is besides the point of the question which was asking whether to put all your eggs in one basket.
May
24
comment Are hashes of hashes used for password storage in practice? Why/why not?
So where would you store the GUID (since you'd need it to log back in later)?
Mar
23
comment Can a Trojan hide itself, so its activity doesn't appear in task manager process?
Short answer: yes.
Mar
4
awarded  Notable Question
Mar
4
awarded  Good Question
Mar
3
awarded  Yearling