Reputation
2,286
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
2 13 29
Newest
 Custodian
Impact
~145k people reached

1d
awarded  Custodian
1d
reviewed No Action Needed Is crossdomain policy file required by EVERY web application?
1d
reviewed Approve Does multiple numbers per button have an effect on security?
1d
reviewed Approve My server was hacked and I am asked to pay to recover my files
1d
comment Practical Attacks on Mifare Classic Chips
If I'm not mistaken, the Mifare Classic Chip is used in the Dutch national public transport chip card (called ov-chipkaart). The security chip card was completely broken some years back. Searching for ov-chipkaart may lead you to more information.
2d
reviewed Approve ip address hack
May
1
comment Using external OAauth Authentication Service, how to manage the users's relations
Maybe also read: Aaron Parecki's OAuth 2 Simplified
May
1
comment Using external OAauth Authentication Service, how to manage the users's relations
Sorry, but I'm not following. An API is an means of communicating with a service. If you build a service and build an API for it, you can have clients communicate with the service through your API. You store data in your database and request access to this data by making a request to the server, using on of the API methods available.
May
1
comment Using external OAauth Authentication Service, how to manage the users's relations
I'm not sure what you mean by 'save the user in the API'?
May
1
reviewed Approve How secure is “Browser in the Box”?
May
1
answered Using external OAauth Authentication Service, how to manage the users's relations
Apr
30
comment Can governments intercept end-to-end encrypted Whatsapp communication through lawful interception?
Linked by Rоry McCune in chat: whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
Apr
28
comment PHP null byte exploit through cookie
@tim, Hmm, no. I don't think it would still allow for uri in that case. File system traversal is indeed the best you could do in this case I think.
Apr
28
comment PHP null byte exploit through cookie
Except if "URL include wrappers" are enabled in PHP, in which case you can specify the file to be included using a URL.
Apr
27
awarded  Quorum
Apr
26
reviewed Approve Should VPN passwords be stored in plaintext?
Apr
25
awarded  Custodian
Apr
24
reviewed Approve May I install more than one anti ransomware on the same pc?
Apr
24
comment How long will it take to break a salted password?
Let's not forget that the amount of password that can be computed per second depends on the hashing algorithm used. When using a fast hashing algorithm, it will be easy to crack. As an example, 350 billion guesses per second can be made against md5.
Apr
24
comment Is it a good idea to let a database do a password check?
related: security.stackexchange.com/questions/74068/…