Reputation
2,286
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
2 13 28
Newest
 Quorum
Impact
~144k people reached

1d
comment Using external OAauth Authentication Service, how to manage the users's relations
Maybe also read: Aaron Parecki's OAuth 2 Simplified
1d
comment Using external OAauth Authentication Service, how to manage the users's relations
Sorry, but I'm not following. An API is an means of communicating with a service. If you build a service and build an API for it, you can have clients communicate with the service through your API. You store data in your database and request access to this data by making a request to the server, using on of the API methods available.
1d
comment Using external OAauth Authentication Service, how to manage the users's relations
I'm not sure what you mean by 'save the user in the API'?
1d
reviewed Approve How secure is “Browser in the Box”?
1d
answered Using external OAauth Authentication Service, how to manage the users's relations
2d
comment Can govt intercept End to End encrypted Whatsapp communication through the lawful interception?
Linked by Rоry McCune in chat: whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
Apr
28
comment PHP null byte exploit through cookie
@tim, Hmm, no. I don't think it would still allow for uri in that case. File system traversal is indeed the best you could do in this case I think.
Apr
28
comment PHP null byte exploit through cookie
Except if "URL include wrappers" are enabled in PHP, in which case you can specify the file to be included using a URL.
Apr
27
awarded  Quorum
Apr
26
reviewed Approve Should VPN passwords be stored in plaintext?
Apr
25
awarded  Custodian
Apr
24
reviewed Approve May I install more than one anti ransomware on the same pc?
Apr
24
comment How long will it take to break a salted password?
Let's not forget that the amount of password that can be computed per second depends on the hashing algorithm used. When using a fast hashing algorithm, it will be easy to crack. As an example, 350 billion guesses per second can be made against md5.
Apr
24
comment Is it a good idea to let a database do a password check?
related: security.stackexchange.com/questions/74068/…
Apr
24
comment Is it a good idea to let a database do a password check?
Data you send to the database commonly can show up in log files: dev.mysql.com/doc/refman/5.5/en/… (and this is not a mysql only issue).
Apr
21
answered Sending server-generated password by email
Apr
20
revised Benefits of a wildcard vs per-subdomain certificates
added 151 characters in body
Apr
20
answered Benefits of a wildcard vs per-subdomain certificates
Apr
19
reviewed Approve Removing a Redirect Virus from Fedora Linux
Apr
19
reviewed Approve Does HTTP Strict Transport Security (HSTS) make any sense in server to server communication?