5,880 reputation
11741
bio website
location
age
visits member for 6 months
seen 5 hours ago
stats profile views 461

If I could, I'd downvote some of my two-month-old answers.


17h
comment How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted?
@MayankSharma Oh no, not at all. I'm not even remotely in a position to judge what did or didn't do. I'm just interested.
18h
comment How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted?
+1 For the credit check. Great way to verify the residence address.
18h
comment How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted?
@MayankSharma You have read and answered this question more than 1 hour ago, yet you only realized it's a good question and upvoted it after you saw a downvote. So do you really think it's a good question or is just to take revenge on the downvoter? "Yeah, I'll upvote that question. That'll show that downvoter". (NB: I don't think the question is bad. Also, I'm genuinely interested in your response)
23h
reviewed Close VirtualBox Guest OS Backtrack 5 cant access Internet
23h
reviewed Close Known plaintext; What cipher is being used here?
23h
reviewed Close Can a windows phone be traced without a SIM and battery
23h
reviewed Reject suggested edit on VirtualBox Guest OS Backtrack 5 cant access Internet
1d
comment Login with a hash. Is this secure enough?
@TheDisintegrator It's already there in the second link. It's what Etsy are using for their password reset URLs.
1d
comment User entered Javascript security implications
Spot on! +1 for mentioning the issue with subdomains.
1d
reviewed Approve suggested edit on Can a windows phone be traced without a SIM and battery
1d
comment Do websocket-powered web apps (e.g. “comet” apps) have to worry about CSRF?
-1 This answer is completely misleading and uninformed, and the parts that tries to be helpful are mere speculations. WebSockets do follow the RFC6454 (The Web Origin Concept). The RFC6455 explains how cookies should be used and how the user agent should transport these cookies. Finally, the whole answer has nothing to do with CSRF.
1d
reviewed Reviewed Why this k parameter is in unary in adversary PPT algorithm?
1d
reviewed Leave Open User entered Javascript security implications
1d
comment Login with a hash. Is this secure enough?
Could you please explain on how/where the BCrypting and salting happens? Because as far as I can see you're directly generating the hash in the SQL query and storing it in the table. Not that this solution needs salting or anything, but I'm just curious.
1d
awarded  Good Answer
1d
answered Login with a hash. Is this secure enough?
1d
revised SPAM postscript
added 2 characters in body
1d
comment How secure is using CRAM-MD5 for email authentication, when not using an SSL connection?
@e-sushi Don't worry about it, my answer pays back when it's helpful to you. That's all we want here.
1d
answered How to prevent restrict access to a web application to authorized devices only?
1d
revised How to prevent restrict access to a web application to authorized devices only?
added 33 characters in body; edited title