2,036 reputation
516
bio website github.com/apsillers
location United States
age 26
visits member for 1 year, 10 months
seen yesterday

"The problem, when solved, will be simple."

Conway's Game of Life

  Controls:
  Step Random Noise
  Clear Random Feature
  Click a cell to toggle it.
  View source


Jul
23
revised BitMessage : Key authentication?
added 73 characters in body
Jul
23
revised BitMessage : Key authentication?
added 73 characters in body
Jul
23
answered BitMessage : Key authentication?
Jul
23
revised How to know if mail is for tracking our IP
edited body
Jul
23
comment How to know if mail is for tracking our IP
@TildalWave That's a fair point. I edited my answer to make the path look like your first example. I hope that makes it clearer to readers not well versed in HTTP that there is nothing "magic" about where the ID lies in the URL path; as long as it's in the HTTP request somewhere, the server can easily extract it. (In any case, you comment will certainly do so, if my answer does not.)
Jul
23
revised How to know if mail is for tracking our IP
edited body
Jul
23
revised How to know if mail is for tracking our IP
added 1004 characters in body
Jul
23
answered How to know if mail is for tracking our IP
Jul
22
comment Eye-Tracking, Public Access Points and Password Protection
@Elmer There might possibly be a delay in your ability to accept answers because you are a new user; if so, I would expect to see the option very soon (in the form of a gray clickable checkmark). See also How does accepting an answer work?
Jul
19
revised Is using a numbers station to transmit a one-time-pad as key actually insecure?
added 3 characters in body
Jul
19
revised Is using a numbers station to transmit a one-time-pad as key actually insecure?
added 375 characters in body
Jul
19
answered Is using a numbers station to transmit a one-time-pad as key actually insecure?
Jul
18
comment Fake Websites: How to avoid?
When SSL is used, an extended validation certificate will have information about the organization that runs the site: e.g., while a regular cert might say "this is the real facebook.com," an extended cert will say "this is the real facebook.com, run by the Facebook, Inc. company." Of course, you can't use this to validate an attack site that doesn't have use extended validation cert, so it's not too helpful here.
Jul
18
comment Securing JSON? Is it justifiable to return html code instead of json to prevent copy cat?
+1; also ask your local lawyer about "database rights": "A database right is considered to be a property right, comparable to but distinct from copyright, that exists to recognise the investment that is made in compiling a database..." (YMMV by national jurisdiction.)
Jul
18
comment Am I covered with GPL If I want to share open source code of project developed in my company?
Noteworthy: this was already asked on Programmers, nearly verbatim, by a different user.
Jul
17
comment How to show XSS popup without using alert and script keywords?
What if you segment the function name as concatenated strings in bracket notation, e.g., onerror="window['al'+'ert'](1)"? (The strings could optionally be stored in variables.) Or is the alert function itself somehow disabled or overwritten? (In that case, delete window['al'+'ert'] should restore it in most browsers.)
Jul
17
revised Can I avoid DNS spoofing by typing the IP address?
added 50 characters in body
Jul
17
answered Can I avoid DNS spoofing by typing the IP address?
Jul
15
comment Stealing WiFi Internet connection
Not an answer, but: if you are correct, and someone has accessed your wireless router even with a password set up, that person is probably also smart enough to spoof his MAC (so item 2.1.a is an overwhelming "no" -- even if it were possible to trace a MAC back to a purchaser somehow, you likely are not seeing the device's real MAC). In the event I'm wrong, see coffer.com/mac_find to look up the MAC's vendor.
Jul
15
comment Intercepting and reading SSL traffic generated by Android
@AJHenderson Sure, I just wanted to bring up the shortcomings of pre-4.0 custom CAs to save the OP some hair-pulling frustration, in case he was planning to use a pre-4.0 device for testing.