Krzysztof Kotowicz

less info
meta site favicon meta user | stack exchange network profile network profile
3,063 reputation
724
bio website blog.kotowicz.net
location Poland
age 33
visits member for 2 years, 1 month
seen Nov 9 '12 at 15:54
stats profile views 168

Web security researcher specialized in discovery and exploitation of HTML5 vulnerabilities. Author of a few recognized HTML5/UI redressing attack vectors.

Solid web application development background in creating secure e-commerce systems, intranet and social networking applications.

Contributes to various open-source projects and also develops his own open-source solutions (just google "ohloh koto").

Speaker at IT security conferences, OWASP and Tech Krakspot meetings.


42 Answers

newest activity votes
17
CRIME - How to beat the BEAST successor?
17
Why don't we use MAC address instead of IP address?
17
If a website allows another person to get a list of the site's users passwords, how likely is it that the passwords are stored in cleartext?
16
Is strip_tags() horribly unsafe?
13
Is this jQuery ajax call vulnerable to XSS?
12
How secure is asking for specific characters of passwords instead of the entire thing?
11
Is it safe to store and replay user-provided mime types?
10
What is a Flash drive by download?
9
Elaborate websockets security
8
Does this htaccess snippet provide sufficient security?
8
How bad is a Self Contained XSS attack?
8
Designing a Capture The Flag target and game management system
8
Virus detection with Process Explorer
7
Is Request.getHeader(“host”) vulnerable?
7
How do I log all my internet-connections
7
Should we be checking password restraints on log in forms?
7
Is my Company Tracking Me?
6
Is security increased by using a subdomain per customer in a web-app?
6
Guarding against rogue certificates
5
Is it safe to serve any user uploaded file under only white-listed MIME content types?
5
localStorage for apps over https. What expectations are there?
5
Implications of Trace/Track Methods on Apache
4
Attacks against windows kiosk software
4
Is it correct to use form field(hidden) for storing Session Token
4
PHP functions for preventing XSS
4
Is silverlight and Java running on the web browser capable of saving “state” into the user's local machines?
4
How to perform a security audit for a PHP application?
3
HTML 5 Security Code Scanner
3
Is Teredo in my router a back door?
3
Should I prevent user from operating with site during some first seconds?
1 2