4,436 reputation
1020
bio website
location Ireland
age
visits member for 2 years, 3 months
seen 11 hours ago

Mar
24
comment Should I be concerned if my website throws stack information?
CWE-209: Information Exposure Through an Error Message & CWE-756: Missing Custom Error Page.
Mar
13
awarded  Good Answer
Mar
12
comment In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
@YuhongBao thanks, I've expanded the description to include this.
Mar
12
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
added 2333 characters in body
Mar
11
answered Is HTTPS required for PCI Compliance when downloading desktop software patches, if no PII is transmitted, and content is digitally signed + verified?
Mar
4
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
clarifications
Mar
4
answered In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
Feb
10
comment Can a malware steal the content of the clipboard?
Don't forget the disagreeable Tynt Tracer.
Feb
9
answered SSH raspberry pi security
Feb
2
revised Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?
added 477 characters in body
Jan
29
awarded  Enlightened
Jan
29
revised GHOST: which services are vulnerable, ssh, web server?
added 105 characters in body
Jan
29
awarded  Nice Answer
Jan
28
revised GHOST: which services are vulnerable, ssh, web server?
typo/braino/wording
Jan
28
revised GHOST: which services are vulnerable, ssh, web server?
added 1581 characters in body
Jan
28
answered GHOST: which services are vulnerable, ssh, web server?
Jan
28
comment GHOST bug: is there a simple way to test if my system is secure?
The GHOST.c POC originates from the original Qualys advisory.
Jan
23
comment openssl enc uses md5 to hash the password and the salt
The point of a rainbow table it to trade the cost of computation (ideally someone else's cost) with the ability to re-use. It makes no sense here (with a salt).
Jan
23
revised openssl enc uses md5 to hash the password and the salt
added 76 characters in body
Jan
23
revised openssl enc uses md5 to hash the password and the salt
links, reword/punctuation