246 reputation
18
bio website brianw.io
location Santa Barbara, CA
age 18
visits member for 1 year, 10 months
seen Jul 25 at 23:49

I'm a Ruby on Rails developer & API Manager at AchieveMint.com

The Hub - http://github.com/bwheeler96

My Blog - http://brianw.io


Sep
10
awarded  Popular Question
Apr
18
awarded  Yearling
Apr
18
awarded  Nice Question
Apr
17
comment Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
Tom, one more question. From reading your post, I got the sense that it is possible to masquerade as someone else on your subnet undetected. Correct?
Apr
17
accepted What prevents me from using ARP poisoning to force a client to use HTTP?
Apr
17
asked What prevents me from using ARP poisoning to force a client to use HTTP?
Apr
17
accepted Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
Apr
17
revised Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
deleted 2 characters in body
Apr
17
asked Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
Mar
14
comment Why do some websites enforce lack of SSL?
I saw it at a seminar I was at, so unfortunately I don't have any hard stats on that. It may not be true in all cases, but it's definitely something to keep in mind
Mar
13
answered Why do some websites enforce lack of SSL?
Jan
9
awarded  Citizen Patrol
Dec
26
accepted Can non-https assets be tampered with?
Dec
26
comment Can non-https assets be tampered with?
I have noticed that about recent browsers. Caused some very annoying and silent CSS loss for a brief period
Dec
26
asked Can non-https assets be tampered with?
Sep
23
comment Could a user never store a password if a username/email hash was used instead?
Right, this is essentially what I was looking for. It doesn't protect against the MITM attack itself, but it could protect against the identity-wide implications.
Sep
22
accepted Could a user never store a password if a username/email hash was used instead?
Sep
22
comment Could a user never store a password if a username/email hash was used instead?
I guess that if someone can run MiTM, they can also run MITB which then defeats the purpose. Good point.
Sep
22
comment Could a user never store a password if a username/email hash was used instead?
as long as nobody does anything stupid (for instance, looking at a big red warning from the browser which says "this server uses an invalid certificate" and clicking "shuddup I want to connect anyway" is "something stupid" - don't worry, at least 90% of people will
Sep
22
awarded  Student