Reputation
387
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 5 14
Impact
~48k people reached

  • 0 posts edited
  • 0 helpful flags
  • 11 votes cast
Aug
17
accepted Certification authority only for certain domains
Aug
6
comment Are there technical differences which make Linux less vulnerable to virus than Windows?
My opinion is people who can operate linux can safely operate windows.
Jul
11
comment Is there a way to make a WEP-secured AP uncrackable?
@MichaelHampton €10 incl. shipping, they become much cheaper after new ac standard routers came to the market.
Jul
3
comment Why is Elliptic Curve Cryptography not used much outside of government?
These patents are US only, right?
May
26
awarded  Popular Question
May
10
comment Why do people say that PHP is inherently insecure?
This is a valid reason - but it is not the only one.
May
10
revised Why do people say that PHP is inherently insecure?
added 301 characters in body
May
10
comment Why do people say that PHP is inherently insecure?
@SteveDL "If you compare a number with a string or the comparison involves numerical strings, then each string is converted to a number and the comparison performed numerically." - so if you think you compare two strings with == as strings - you are not.
May
10
awarded  Necromancer
May
9
revised Why do people say that PHP is inherently insecure?
added 105 characters in body
Apr
24
asked Is there an exploit for python hash collision?
Feb
27
comment Timsort python exploit
@schroeder but they may be too.
Feb
27
comment Timsort python exploit
@schroeder Why "can this bug be exploited" is not a security question?
Feb
27
comment Timsort python exploit
@CodesInChaos DoS is still a security issue.
Feb
27
comment Timsort python exploit
@schroeder That's what i'm asking. Now open the question.
Feb
26
comment Timsort python exploit
@schroeder it could lead at least to crash due to unhandled exception or segfault.
Feb
26
asked Timsort python exploit
Feb
23
awarded  Notable Question
Jan
12
comment What is the purpose of the “Password minimum age” setting?
This would only work if passwords are unsalted, or if salt is the same for an user. MS still uses fast unsalted hashes which are unsecure for decades
Jan
2
comment Is Django vulnerable to shellshock?
"The specific problem is in allowing attacker controlled environment variables." +1 for that. Any feature is a security threat in the same time. If it's not needed - it has to be turned off.