25,775 reputation
971109
bio website
location Finland
age
visits member for 1 year, 5 months
seen 26 mins ago

I do security work and I enjoy it. You can reach me on: adnan.stackexchange[*at*]live[*dot*]fi


Mar
22
reviewed Leave Open What info to log/store about a user login?
Mar
22
reviewed Leave Open How can I block flash from obtaining a list of available fonts in my browser?
Mar
22
reviewed Leave Open Using Remote Desktop to bring a 3rd party application to all my employees
Mar
22
reviewed Leave Open Communicate between two sites both with SSL
Mar
22
reviewed Looks Good What info to log/store about a user login?
Mar
22
reviewed Close OAuth 2.0 - Why does the authorization server return 400 instead of 401 when the resource owner credentials are invalid?
Mar
22
reviewed No Action Needed Sniffing WiFi with tcpdump on an iPad
Mar
22
comment Securing internal REST service call via JavaScipt
I'd write this in answer with some more explanation, but I wouldn't feel good about it since it's not really an answer. To sum it up for you: You're trying to achieve the impossible. With our current technology (and, frankly, any relevant technology I can imagine), there's no way to do what you're trying to do. The closest thing is restricting your SPA to authenticated users and then generate a short-lived secret for each user that is sent to the browser after login.
Mar
22
reviewed No Action Needed How should I select which antivirus software to install on my new laptop?
Mar
22
reviewed Close How do I tell which application is using which port?
Mar
22
reviewed Close How to prepare a report on security weakness in our software
Mar
22
reviewed No Action Needed Securing internal REST service call via JavaScipt
Mar
22
reviewed Approve suggested edit on EMV(Chip) Cards - What's the point of having the chip card communicating directly to the authorising server? & Clarification of CDA in EMV
Mar
22
reviewed Approve suggested edit on Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Mar
21
reviewed Leave Open How can you prevent employees of your company from creating valid ssl certs?
Mar
21
reviewed Leave Open How secure is switching keys if breaking the key is an intractable problem?
Mar
21
reviewed Close Secure a string in PHP
Mar
21
reviewed Close Is it secure for a site to serve the login page with HTTP, but have the actual site in HTTPS?
Mar
21
reviewed No Action Needed How useful is CISSP to a recent graduate?
Mar
21
reviewed No Action Needed Is it possible to keep several files on windows partition after re-installing windows?