1,125 reputation
21226
bio website
location Singapore
age
visits member for 3 years, 11 months
seen 11 hours ago


Apr
14
awarded  Good Question
Apr
13
comment Security concerns allowing internet connected server to write on network server
Which question are you referring to?
Apr
11
comment Security concerns allowing internet connected server to write on network server
unrelated to security is off-topic here, but configuration issues regarding security are definitely on-topic here. That link is saying that config issues
Apr
6
comment Which is better for server-to-server-communication: IPSec or TLS?
@TomLeek, Since TLS is layer 5 and IPsec is layer 3, for maximum securityu couldn't we combine them by running TLS on top of IPsec?
Apr
6
comment Does DNS pinning protect against all DNS rebinding attack?
@SteffenUllrich, Now let's create a new scenario. We'll tweak the above situation such that now the server has a static IP and the client (Alice) is leased on a DHCP. Now Alice 1.2.3.4 send packets to the server, and the server replies to 1.2.3.4. But before the reply has been received, Alice is assigned a new IP and 1.2.3.4 is now assigned to Bob Evil (Alice's neighbour). So Bob Evil receives the message intended for Alice.
Apr
6
comment Security concerns allowing internet connected server to write on network server
and the configuration has everything to do with security.
Apr
6
comment Why do some people really hate security via client-side?
@rook, Ic, so you study penetration testing.
Apr
5
comment Why do some people really hate security via client-side?
@rook, Ic, do you study compsci?
Apr
5
comment Why Adobe is recommending McAfee security scan during flash player installation?
How much would that cost?
Mar
29
revised How does SSL/TLS work?
+ append information
Mar
29
comment How does SSLstrip work?
Another solution is HTTPS-Everywhere.
Mar
29
comment Does HTTPS Everywhere defend me against sslsniff-like attacks?
@LanceBaynes, Because users are lazy and never type https://paypal.com directly in the URL bar. The user types paypal.com which brings him to the HTTP version of paypal.com.
Mar
29
suggested approved edit on How does SSL/TLS work?
Mar
29
comment Why do some people really hate security via client-side?
@rook, I see alot of your answers, and I'm wondering What's your age?
Mar
29
revised Guidance for implementors of HTTPS-only sites (Server side)
added 242 characters in body
Mar
29
answered Guidance for implementors of HTTPS-only sites (Server side)
Mar
29
comment DNS Rebinding attack - does this attack require victim to use an attacker's DNS server for resolution? How will that happen?
Since DNS pinning would cause security flaws, How can we prevent DNS Rebinding attacks?
Mar
29
comment Why are scripts injected through innerHTML not executed whilst onerror and other on<event> attributes on elements are? - Google XSS Challenge 2
"browser won't execute scripts added after the page has loaded", per xss-game.appspot.com/level3
Mar
29
comment What does a Firewall mean by “connect to TCP port without your permission”?
@Brandon, But the diagram shows that the connections have been blocked, yet I'm browsing with no problems. Hence, these ports shouldn't be the ones used for web browsing
Mar
29
revised Flash ignores Content-Type header, allowing XSS?
fixed unlinked link