1,481 reputation
217
bio website twitter.com/dinusmadu
location Romania
age 26
visits member for 4 months
seen 17 hours ago
stats profile views 80

Security enthuziast


Feb
28
answered How less secure is an encryption if we know something about the original data?
Feb
28
revised Do iframes maintain the security of the nested website?
added 157 characters in body
Feb
28
revised Do iframes maintain the security of the nested website?
added 714 characters in body
Feb
28
answered Do iframes maintain the security of the nested website?
Feb
27
comment Affordable web application attack tools
I edited the answer, considering your observation.
Feb
27
revised Affordable web application attack tools
added 183 characters in body
Feb
27
answered Affordable web application attack tools
Feb
22
revised How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
Corrected a few sintax mistakes.
Feb
22
suggested suggested edit on How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
Feb
22
answered SQL Injection How to inject Clean/Rest URLS
Feb
18
comment How to not reveal that you are using PHP?
In addition to what you said, some variables like PHPSESSID should also be renamed. Using a URL rewrite scheme would also make guessing harder.
Feb
17
answered if Noscript is secure is that possible our system still compromise by crypto?
Feb
17
comment Is there cryptographic material in a phone's SIM card that can be used with RSA encryption?
Here is something that may be useful:gpaterno.com/publications/2009/…. It seems that, at the moment, SIM cards do not have this functionality.
Feb
10
comment What unique risks does MVC model binding bring to a website? What additional vigilance is needed?
This is an interesting topic, it should be further investigated. I'll try to check the behavior as soon as I have some spare time for it.
Feb
10
answered Is there is a way to lock my USB port over the device physically?
Feb
8
comment keylogger detection by listening network
A keylogger sending data is similar to outlook or thunderbird sending data. It connects to the mail server(gmail) and sends a normal email. It may send an email with an encrypted attachment, or a fully encrypted mail, but a human could do the same thing, so it is almost impossible to differentiate, if you do not know how the keylogger works.
Feb
8
comment What unique risks does MVC model binding bring to a website? What additional vigilance is needed?
What kind of hidden properties are you referring to? I have read the article and I haven't seen such a mention. Even if what you are saying is happening, a whitelist approach would solve the problem.
Feb
7
comment Options for simple phone verification with pin delivery
Just to clarify, you want to confirm that the phone number is associated with the site owner or you want to confirm that the number exists?
Feb
7
answered Ssl certificate rekey or revoke
Feb
7
reviewed No Action Needed Secure source code review tool for jQuery