8,591 reputation
2267
bio website twitter.com/secboffin
location Leicester, United Kingdom
age 31
visits member for 2 years, 6 months
seen May 8 at 13:20
stats profile views 445

May
8
awarded  Enlightened
May
8
awarded  Nice Answer
Apr
18
awarded  Good Answer
Apr
17
accepted What vulnerabilities could be caused by a wildcard SSL cert?
Apr
17
awarded  Popular Question
Mar
10
awarded  Nice Question
Feb
6
comment What is the difference between SSL vs SSH? Which is more secure?
SSL and SSH were developed in parallel (both being released in 1995), so whether SSH even could have used SSL is not clear. Whether it should have used the contemporary SSL 2.0 is very dubious too :-)
Feb
6
reviewed Needs Improvement Is it possible to boot into root's /bin/bash on a LUKS encrypted device?
Feb
6
awarded  Custodian
Feb
6
reviewed Excellent Is it useful to determine the name of the server software while doing a penetration test?
Feb
3
comment What chars should I not allow in passwords?
Because it's more likely to be handled incorrectly by the underlying implementation. You don't want to start truncating passwords just because somewhere in the bowels of your runtime they get converted to C strings.
Jan
13
awarded  Notable Question
Dec
29
awarded  Good Answer
Dec
23
awarded  Good Answer
Nov
18
awarded  Yearling
Oct
7
awarded  Popular Question
Sep
28
comment Are anti-virus companies companies regularly committing software piracy?
Do you know that F-Secure isn't licensed? Their corpus of clean Adobe files could come from the installation of Photoshop that their designers use.
Sep
21
awarded  Custodian
Sep
15
awarded  Necromancer
Aug
16
revised Secure memcpy for pure C
Update a dead link.