Reputation
406
Top tag
Next privilege 500 Rep.
Access review queues
Badges
4 10
Newest
 Yearling
Impact
~4k people reached

Mar
28
comment What security measures to be considered
This question seems far too broad...
Mar
28
comment Malicious tracking script being served from google server to circumvent block lists
Why shouldn't you inform Google? If it's as serious as you think it is, I'm pretty sure it'd be better for everyone to inform Google.
Mar
17
comment Can an ip be forced to connect? If so, how is it done, and how can I prevent it?
What do you mean when you say an IP is forced to connect to another IP? The question doesn't really make sense.
Feb
16
comment Can an open Wi-Fi hotspot be considered “secure” when using a VPN connection?
The article isn't saying a VPN is insecure over an open wifi hotspot. It's saying that before you've established a VPN connection, any non-secure connections will be out in the open. An outbound firewall configured to block all connections until a VPN tunnel is established could fix this hole.
Dec
1
comment Have weaknesses in SHA-1 and MD5 ever actually been successfully used in an attack?
evilize library (not quite an actual attack though but shows how practical it is)
Oct
19
comment Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?
Depending on who you're trying to defend against, have a look at the demo for HSTS super-cookies. It's a bit of a dilemma since fixing it involves a trade-off between security and privacy.
Oct
19
comment Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?
Don't forget the latest dilemma in browser security, HSTS tracking.
Oct
19
comment Is there any way to safely examine the contents of a USB memory stick?
That won't protect you from something like the USB killer device.
Aug
22
comment Why not create your own encryption?
@user158421 just because you can't break it yourself doesn't mean someone else smarter than you can't either.
Jul
31
comment Is this code javascript vulnerable to DOM based XSS?
Without looking at the rest of the application, I wouldn't be so quick to say it's definitely vulnerable.
Jul
22
comment What kind of attacks do Javascript WebWorkers protect against?
I had a quick look at WebWorker and it doesn't look like a security feature? AFAIK, it's a way to implement background tasks. Possibly related: stackoverflow.com/questions/16600607/…
Jun
24
comment Chaining VPNs to increase privacy?
What you described sounds similar to (but not strictly the same as) the onion router Tor uses. I'm guessing the Tor network also depends on the fact that it's impractical to sub-peona the whole chain of ISPs across the globe.
May
28
comment Why use Keepass, etc. if all your passwords are in one place?
@Chloe that's certainly a risk that should be considered. Personally, I don't use LastPass for this very reason (and prefer to opt for software like 1Password). However, this is besides the point of the question which was asking whether to put all your eggs in one basket.
May
24
comment Are hashes of hashes used for password storage in practice? Why/why not?
So where would you store the GUID (since you'd need it to log back in later)?
Mar
23
comment Can a Trojan hide itself, so its activity doesn't appear in task manager process?
Short answer: yes.
Feb
25
comment How to perform safe authentication via HTTP?
@Aurangzeb Yes, but that someone shouldn't be everyone between you and the server. If we could trust them, we wouldn't need SSL/TLS now would we? The attack I'm talking about is the one the Tunisian government used to compromise Facebook logins by injecting Javascript into the insecure login page that sends off login details to a 3rd party before it was posted to a secure login page.
Feb
25
comment How to perform safe authentication via HTTP?
What would stop a man-in-the-middle attack that serves the client a bogus version of jCryption that sends off the password to a 3rd party?
Jan
8
comment Is it possible to hide behind a hostname to purposefully effect SEO?
Whoa, slow down. What problem are you exactly facing? What makes you think Google has penalised you? cum hoc ergo propter hoc
Dec
3
comment What is the shortest malicious XSS possible?
This sounds perfect for the Code Golf SE
Nov
11
comment JavaScript Injection using Man in the Middle Attack
Download a copy of MITM Proxy and have a play around. Modifying traffic is done on-the-fly.