283 reputation
1312
bio website
location
age
visits member for 1 year, 10 months
seen Dec 7 at 2:53

Mar
28
comment Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?
+1 to the question. Is there a way to connect to an AP with given SSID and MAC? E.g. if you have 2 APs with same SSID and want to be connected to one of them regardless to signal strength.
Mar
28
comment DNS Spoofing vs DNS Cache Poisoning
So is DNS spoofing a result and DNS poisoning - a way to the result?
Mar
27
comment Has the WPS brute-force cracking issue been fixed?
Thank for describing of WPS vulnerability.. oh wait, I already knew it! For some reasons, WPS bruteforce with reaver doesn't work for that people. Wonder why.
Mar
27
comment Has the WPS brute-force cracking issue been fixed?
What the heck? Who downwotes and why? No, I doesn't have a source, but people who hack WPS tell that newer devices are unhackable, that's why I ask.
Mar
27
asked Has the WPS brute-force cracking issue been fixed?
Mar
21
comment Why don't major browsers currently support TLS above version 1.0?
I've heard that Lucky13 was not fixed.
Mar
21
revised Why don't major browsers currently support TLS above version 1.0?
added 26 characters in body
Mar
21
comment Why don't major browsers currently support TLS above version 1.0?
See question update.
Mar
21
revised Why don't major browsers currently support TLS above version 1.0?
added 253 characters in body; edited title
Mar
21
comment Why don't major browsers currently support TLS above version 1.0?
The link only talks about Chrome.
Mar
20
revised Why don't major browsers currently support TLS above version 1.0?
added 108 characters in body
Mar
20
revised Why don't major browsers currently support TLS above version 1.0?
added 1406 characters in body
Mar
19
revised Why don't major browsers currently support TLS above version 1.0?
Expanded the question to make it more clear
Mar
19
comment Why don't major browsers currently support TLS above version 1.0?
<_There has been compatibility problems with servers that has not activated the newer protocols._> - you can still fallback to older versions. The problem is the clients.
Mar
19
comment Are there any statistics about webservers and browsers TLS support?
@Jonas but still... Usually that was Microsoft who made security fails like LM/NTLM authentication used even now.
Mar
19
asked Why don't major browsers currently support TLS above version 1.0?
Mar
18
comment How would one crack a weak but unknown encryption protocol?
It is a rule.
Mar
18
comment HTML encoding to protect against XSS
ha.ckers.org/xss.html - I lol'd, who calls a page of 100 kb text a cheat sheet?
Mar
18
comment HTML encoding to protect against XSS
+100500 to template frameworks and +100500 to OWASP. Only PHP monkeys seem not to use frameworks, see "PHP: Fractal of bad design".
Mar
18
comment HTML encoding to protect against XSS
DOM based XSS from the point of defenders is the same as reflected XSS except it's reflected not by server but client code and should be escaped there.