283 reputation
1312
bio website
location
age
visits member for 1 year, 9 months
seen Nov 17 at 18:18

Nov
26
revised Why do people say that PHP is inherently insecure?
added 137 characters in body
Nov
26
comment What is a pen tester?
A person who tests pens. If they write properly, you know.
Nov
26
comment Why don’t SMTP servers just require all senders to be authenticated before accepting mail?
Can't their admins be charged for open SMTP servers?
Nov
26
comment Why can SSL certificates not be free of charge?
With SRP, you won't need any certificates after account creation.
Nov
26
comment How secure is the SRP that Blizzard uses to protect passwords?
@CodesInChaos is there a difference if the base is fixed?
Nov
26
revised Why do people say that PHP is inherently insecure?
added 196 characters in body
Nov
26
answered Why do people say that PHP is inherently insecure?
Nov
26
comment How common is Perfect Forward Secrecy in HTTPS clients?
@CodesInChaos don't you think the connection will be vulnerable to MITM? SSL parameres exchange is done in plaintext.
Nov
26
answered VPN Authentication over WiFi — Is it secure?
Nov
5
awarded  Nice Question
Nov
3
awarded  Popular Question
Aug
21
awarded  Notable Question
Jun
25
awarded  Popular Question
Jun
12
revised How secure is the SRP that Blizzard uses to protect passwords?
added 9 characters in body
May
26
comment Why don't major browsers currently support TLS above version 1.0?
bugzilla.mozilla.org/show_bug.cgi?id=480514#c86 2013-05-24 21:14:19 "Seems abandoned. Sad really." lol
May
24
comment Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?
How about other managers?
May
22
comment How secure is the SRP that Blizzard uses to protect passwords?
@CodesInChaos that doesn't really matter in case of SRP - if you'll find discrete logarithm and find the password hash, you don't need the password anymore, you can use the hash to log in. If you can't find it, you have to calculate modpow() for each password and verifier which is slow enough.
May
22
answered How secure is the SRP that Blizzard uses to protect passwords?
Mar
28
comment Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?
No wai under Windows?
Mar
28
comment Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?
+1 to the question. Is there a way to connect to an AP with given SSID and MAC? E.g. if you have 2 APs with same SSID and want to be connected to one of them regardless to signal strength.