Moshe

601 reputation

414

bio	website	MosheBerman.com
	location	United States
	age
visits	member for	2 years, 6 months
	seen	Apr 10 at 12:46
stats	profile views	57

I'm a student at Brooklyn College, working on a degree in Computer Science. I write software.

Feel free to check out my website, my Careers profile, and my apps.

	601 reputation	bio	website	MosheBerman.com	visits	member for	2 years, 6 months
414 badges		location	United States		seen	Apr 10 at 12:46

summary answers questions tags badges favorites bounties reputation activity

21 Comments

suggestions reviews revisions comments badges posts accepts all

Nov 29	comment	Is it possible to change the admin user/password remotely on a router without logging in? @ChrisAD - An unauthorized way.
Nov 29	comment	Is it possible to change the admin user/password remotely on a router without logging in? @RoryMcCune - School, there's a router which we don't have physical access to, which a fellow student changed the admin user/pwd.
Nov 23	comment	Is it possible to change the admin user/password remotely on a router without logging in? Why the downvote?
Nov 23	comment	How does basic HTTP Auth work? @Ams - Implementations and mechanisms are very related to security, as they can be used in researching exploits. I asked this specifically because of a comment on this answer: security.stackexchange.com/questions/730/…
Nov 23	comment	Is it possible to change the admin user/password remotely on a router without logging in? I will ask, but please clarify this: Are you saying that so long as there is some username/password encoded in Base64, the router should log me in?
Nov 22	comment	Is it possible to change the admin user/password remotely on a router without logging in? So how would I do that? Can you provide some example(s)?
Nov 22	comment	Is it possible to take down a site using javascript in the URL bar? Exactly, I was wondering about injection through javascript.
Nov 22	comment	What's involved in taking over someone else's domain name? This requires more resources than actually changing the records though, because there is one record and many users.
Nov 21	comment	What's involved in taking over someone else's domain name? Excellent link. I enjoyed reading that report.
Nov 21	comment	Is it necessary to protect user data if they know and agree to it being insecure? Not a EULA - a simple alert at the top of the page, similar to the SO welcome message should suffice: `"Any information you enter on this website is in the public domain. By using this site, you agree."`
Nov 21	comment	Is it necessary to protect user data if they know and agree to it being insecure? True, although I don't have money. :-) (PS Shouldn't this be a comment?)
Nov 21	comment	What's involved in taking over someone else's domain name? @Ams - I was asking more about mitm, not registrar issues, but I don't know enough to differentiate much.
Nov 21	comment	Is it necessary to protect user data if they know and agree to it being insecure? I've edited my question in response to some of your points.
Nov 21	comment	How is UAC a security improvement? @Ams, once again, I've spotted a typo: `fist`. ;-)
Nov 21	comment	How is the password prompt going to protect me from ruining my computer? Isn't your answer similar to my "kiosk" example?
Nov 21	comment	Which languages are better for attacks against websites? nor am I. :-)
Nov 21	comment	What is the corrupted image vulnerability? How does it work? @Ams - I mean binary code.
Nov 20	comment	What protects cookies? What if the browser doesn't implement SOP? (Also, you misspelled "third".)
Nov 20	comment	Is the law the only thing stopping many sites from being hacked/cracked? Actually, Georges, despite what we would like to call it, because the majority of people call it hacking, that is the proper term. That said, I've changed the title to reflect your thoughts. Thanks for your answer.
Nov 17	comment	Is the law the only thing stopping many sites from being hacked/cracked? @atdre - No, I'm asking if it's the case that laws prevent cybercrime.