1,546 reputation
319
bio website twitter.com/dinusmadu
location Romania
age 27
visits member for 1 year, 7 months
seen 10 hours ago

Security enthuziast


May
28
awarded  Popular Question
Jan
15
awarded  Nice Answer
Jan
3
awarded  Yearling
Feb
28
answered How less secure is an encryption if we know something about the original data?
Feb
28
revised Do iframes maintain the security of the nested website?
added 157 characters in body
Feb
28
revised Do iframes maintain the security of the nested website?
added 714 characters in body
Feb
28
answered Do iframes maintain the security of the nested website?
Feb
27
comment Affordable web application attack tools
I edited the answer, considering your observation.
Feb
27
revised Affordable web application attack tools
added 183 characters in body
Feb
27
answered Affordable web application attack tools
Feb
22
revised How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
Corrected a few sintax mistakes.
Feb
22
suggested suggested edit on How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
Feb
22
answered SQL Injection How to inject Clean/Rest URLS
Feb
18
comment How to not reveal that you are using PHP?
In addition to what you said, some variables like PHPSESSID should also be renamed. Using a URL rewrite scheme would also make guessing harder.
Feb
17
answered if Noscript is secure is that possible our system still compromise by crypto?
Feb
17
comment Is there cryptographic material in a phone's SIM card that can be used with RSA encryption?
Here is something that may be useful:gpaterno.com/publications/2009/…. It seems that, at the moment, SIM cards do not have this functionality.
Feb
10
comment What unique risks does MVC model binding bring to a website? What additional vigilance is needed?
This is an interesting topic, it should be further investigated. I'll try to check the behavior as soon as I have some spare time for it.
Feb
10
answered Is there is a way to lock my USB port over the device physically?
Feb
8
comment keylogger detection by listening network
A keylogger sending data is similar to outlook or thunderbird sending data. It connects to the mail server(gmail) and sends a normal email. It may send an email with an encrypted attachment, or a fully encrypted mail, but a human could do the same thing, so it is almost impossible to differentiate, if you do not know how the keylogger works.
Feb
8
comment What unique risks does MVC model binding bring to a website? What additional vigilance is needed?
What kind of hidden properties are you referring to? I have read the article and I haven't seen such a mention. Even if what you are saying is happening, a whitelist approach would solve the problem.