31,105 reputation
1398131
bio website
location Finland
age
visits member for 2 years, 5 months
seen 16 mins ago

(+)


Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@Falco Apologies, you're right about one thing. It is indeed a mixed content warning triggered by the merchant logo (which is the only thing transmitted via plain HTTP). In this case, it's also not a problem at all. It's an image. The worst that can happen is that MiTM might changes the image to another image, no big deal. Also, browsers don't supply referrer information from HTTPS to HTTP, so that's also covered. All in all, you're wrong, you're over reacting, and yes it's safe.
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@Falco Ha?! That triangle information sign isn't a mixed-content warning. It's telling the user that the server isn't supplying full identity information in the certificate. Not a big problem at all.
Sep
25
revised What is the meaning of “something AND 1=0” command in SQL?
deleted 69 characters in body
Sep
25
reviewed Approve Shellshock Bash bug on mobile systems
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@DavidZ Indeed it is. It also implements two-factor authentication with OTPs.
Sep
25
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
@SteveJessop While I certainly agree that sending your bank's creds to PayPal will probably break your bank's T&C (much like using Mint.com), I still think it's irrelevant in this context. Breaking your bank's T&C is a legal issue, while the question whether the creds are sent to PayPal is a technical security-related one. In all cases, I'm happy that you mentioned it.
Sep
25
awarded  Enlightened
Sep
24
reviewed Approve Make OSSEC ban ip on remote firewall
Sep
24
awarded  Autobiographer
Sep
24
awarded  Enlightened
Sep
24
awarded  Guru
Sep
24
awarded  Nice Answer
Sep
24
reviewed Approve What needs to be encrypted for FIPS 140-2 compliance?
Sep
24
awarded  Enlightened
Sep
24
awarded  Nice Answer
Sep
24
reviewed Leave Open New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
Sep
24
revised New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
added 413 characters in body
Sep
24
answered New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
Sep
24
reviewed Approve Building a website with MAXIMUM website security
Sep
24
reviewed No Action Needed Is it safe to point a (sub)domain to my home IP address?