701 reputation
817
bio website MosheBerman.com
location United States
age 23
visits member for 3 years, 11 months
seen Apr 10 '13 at 12:46

I'm a student at Brooklyn College, double majoring in computer science and journalism. I make apps for Apple's iOS.

Here's my website, my GitHub, my Careers profile, and my apps on iTunes.


Nov
29
comment Is it possible to change the admin user/password remotely on a router without logging in?
@ChrisAD - An unauthorized way.
Nov
29
comment Is it possible to change the admin user/password remotely on a router without logging in?
@RoryMcCune - School, there's a router which we don't have physical access to, which a fellow student changed the admin user/pwd.
Nov
23
comment Is it possible to change the admin user/password remotely on a router without logging in?
Why the downvote?
Nov
23
comment How does basic HTTP Auth work?
@Ams - Implementations and mechanisms are very related to security, as they can be used in researching exploits. I asked this specifically because of a comment on this answer: security.stackexchange.com/questions/730/…
Nov
23
comment Is it possible to change the admin user/password remotely on a router without logging in?
I will ask, but please clarify this: Are you saying that so long as there is some username/password encoded in Base64, the router should log me in?
Nov
22
comment Is it possible to change the admin user/password remotely on a router without logging in?
So how would I do that? Can you provide some example(s)?
Nov
22
comment Is it possible to take down a site using javascript in the URL bar?
Exactly, I was wondering about injection through javascript.
Nov
22
comment What's involved in taking over someone else's domain name?
This requires more resources than actually changing the records though, because there is one record and many users.
Nov
21
comment What's involved in taking over someone else's domain name?
Excellent link. I enjoyed reading that report.
Nov
21
comment Is it necessary to protect user data if they know and agree to it being insecure?
Not a EULA - a simple alert at the top of the page, similar to the SO welcome message should suffice: "Any information you enter on this website is in the public domain. By using this site, you agree."
Nov
21
comment Is it necessary to protect user data if they know and agree to it being insecure?
True, although I don't have money. :-) (PS Shouldn't this be a comment?)
Nov
21
comment What's involved in taking over someone else's domain name?
@Ams - I was asking more about mitm, not registrar issues, but I don't know enough to differentiate much.
Nov
21
comment Is it necessary to protect user data if they know and agree to it being insecure?
I've edited my question in response to some of your points.
Nov
21
comment How is UAC a security improvement?
@Ams, once again, I've spotted a typo: fist. ;-)
Nov
21
comment How is the password prompt going to protect me from ruining my computer?
Isn't your answer similar to my "kiosk" example?
Nov
21
comment Which languages are better for attacks against websites?
nor am I. :-)
Nov
21
comment What is the corrupted image vulnerability? How does it work?
@Ams - I mean binary code.
Nov
20
comment What protects cookies?
What if the browser doesn't implement SOP? (Also, you misspelled "third".)
Nov
20
comment Is the law the only thing stopping many sites from being hacked/cracked?
Actually, Georges, despite what we would like to call it, because the majority of people call it hacking, that is the proper term. That said, I've changed the title to reflect your thoughts. Thanks for your answer.
Nov
17
comment Is the law the only thing stopping many sites from being hacked/cracked?
@atdre - No, I'm asking if it's the case that laws prevent cybercrime.