31,375 reputation
1399132
bio website
location Finland
age
visits member for 2 years, 6 months
seen 1 hour ago

Mildot


Sep
26
reviewed Approve Securing a VPS network with a VPN and a DMZ
Sep
26
reviewed Approve Shellshock attack scenario exploiting php
Sep
26
reviewed Approve Could Google Mail or Google Drive work as a path to a company's network?
Sep
26
reviewed Approve How does the Shellshock patch actually prevent the problem?
Sep
26
reviewed Edit Anomaly intrusion detection
Sep
26
revised Anomaly intrusion detection
fixed small typo's
Sep
25
reviewed No Action Needed Is this a demonstration that the shellshock patch isn't working?
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@Falco Umm.. no? Because the insecure JS/CSS and insecure image warnings are completely different. The insecure image warning is a small warning and you don't have to do anything about it (defaults to allow), but the insecure JS/CSS is a warning that specifically tells you that it's a script and you need to do some actions to load it (defaults to deny).
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@Falco Apologies, you're right about one thing. It is indeed a mixed content warning triggered by the merchant logo (which is the only thing transmitted via plain HTTP). In this case, it's also not a problem at all. It's an image. The worst that can happen is that MiTM might changes the image to another image, no big deal. Also, browsers don't supply referrer information from HTTPS to HTTP, so that's also covered. All in all, you're wrong, you're over reacting, and yes it's safe.
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@Falco Ha?! That triangle information sign isn't a mixed-content warning. It's telling the user that the server isn't supplying full identity information in the certificate. Not a big problem at all.
Sep
25
revised What is the meaning of “something AND 1=0” command in SQL?
deleted 69 characters in body
Sep
25
reviewed Approve Shellshock Bash bug on mobile systems
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@DavidZ Indeed it is. It also implements two-factor authentication with OTPs.
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@SteveJessop While I certainly agree that sending your bank's creds to PayPal will probably break your bank's T&C (much like using Mint.com), I still think it's irrelevant in this context. Breaking your bank's T&C is a legal issue, while the question whether the creds are sent to PayPal is a technical security-related one. In all cases, I'm happy that you mentioned it.
Sep
25
awarded  Enlightened
Sep
24
reviewed Approve Make OSSEC ban ip on remote firewall
Sep
24
awarded  Autobiographer
Sep
24
awarded  Enlightened
Sep
24
awarded  Guru
Sep
24
awarded  Nice Answer