625 reputation
1610
bio website
location
age
visits member for 4 years
seen yesterday

Feb
20
awarded  Famous Question
Feb
4
comment How is PayPass/payWave secure when PIN is required after presenting the card to the contactless terminal?
How can the card that was taken away from the terminal and so got shut off connect to the bank?
Feb
4
asked How is PayPass/payWave secure when PIN is required after presenting the card to the contactless terminal?
Jan
24
awarded  Yearling
Jan
23
comment Why not generate a client SSL with expiration date in very distant future?
I can generate a new certificate at any moment if I feel I have a weak one. And I'm generating it myself (no CA) anyway - no matter which expiration date I choose.
Jan
23
asked Why not generate a client SSL with expiration date in very distant future?
Nov
17
asked What's the typical approach to caching invalid authentication attempts?
Nov
13
awarded  Popular Question
Nov
7
awarded  Teacher
Nov
7
answered Why should I have secure passwords for sites that I pay bills on?
Sep
24
asked How could SSL certificate affect the symmetric key length?
Sep
24
comment Why do testers often use the single quote ( ' ) to test for SQL injection?
+1, also here's a related question with a nice example stackoverflow.com/q/332365/57428
Sep
10
accepted Why would HTTP client only send authentication headers once an unauthenticated request was rejected?
Sep
10
asked Why would HTTP client only send authentication headers once an unauthenticated request was rejected?
Jul
21
asked Why allow access without an access token but deny access with an invalid access token?
Jul
2
awarded  Curious
Jan
24
awarded  Civic Duty
Jun
12
awarded  Notable Question
Apr
13
awarded  Yearling
Mar
18
comment Does allowing everyone know when a server process was started pose a security risk?
@zedman9991: Whatever. What if a "malicious user" knows when my server process was started or something like that is what I want to know. Impersonation, credentials, all that stuff are all implementation details.