Reputation
609
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
5 19
Newest
 Yearling
Impact
~11k people reached

Feb
27
awarded  Yearling
Jan
24
accepted Verifying that an Android banking app checks that the certificate is trusted
Jan
24
comment Verifying that an Android banking app checks that the certificate is trusted
@NeilSmithline thanks very much, this worked excellent. Would you mind writing an answer for it?
Jan
24
comment Verifying that an Android banking app checks that the certificate is trusted
@NeilSmithline sorry, I should have clarified that I'm working with an unrooted phone, so I can't edit its /etc/hosts. The idea was that with the VPN I could sniff all traffic (useful for point 1). Then I tried to extend it to verify point 2.
Jan
24
revised Verifying that an Android banking app checks that the certificate is trusted
added 11 characters in body
Jan
23
asked Verifying that an Android banking app checks that the certificate is trusted
Jan
19
awarded  Nice Question
Jan
18
revised Why use random salts?
edited title
Sep
18
awarded  Popular Question
Aug
13
comment What to do in case of a weak certificate on my bank's website?
@Jeroen-ITNerdbox you're right. Searching a bit gives me code.google.com/p/chromium/issues/detail?id=488305. I think it's this issue.
Aug
11
accepted What to do in case of a weak certificate on my bank's website?
Aug
11
comment What to do in case of a weak certificate on my bank's website?
@Jeroen-ITNerdbox in the "Additional certificates" section you can see the VeriSign certificate uses SHA-1, which Chromium doesn't like. They have had almost a year to get a stronger certificate.
Aug
11
comment What to do in case of a weak certificate on my bank's website?
I didn't think of looking at my card, that's a good idea. Unfortunately, they didn't put it there(!) I found their number on old correspondence though. Anyway, thanks for your information.
Aug
11
revised What to do in case of a weak certificate on my bank's website?
added 1 character in body
Aug
11
asked What to do in case of a weak certificate on my bank's website?
Aug
5
accepted Is it OK to create a new SSL certificate before the old one expires?
Aug
5
asked Is it OK to create a new SSL certificate before the old one expires?
Jul
25
awarded  Constituent
Jul
25
awarded  Caucus
Jun
16
comment OWASP WebGoat Warning Meaning
And machines behind the same firewall can access your machine; so don't do it when on a network with people you don't fully trust.