1,013 reputation
11023
bio website
location Singapore
age 22
visits member for 3 years, 3 months
seen Aug 14 at 11:13

Autodidact of various trades, geek of several.





There are probably two types of coders; the one who took up this craft before he knows it’s a quadzillion dollar industry, and the one after.






Sold as cheap, forced labour for 16056/16056 hours. When the people fear the government, there is tyranny. When governments fear the people, there is liberty.























Postal: PacerierSE Gmail


Jul
10
awarded  Notable Question
Jul
6
awarded  Popular Question
Jul
2
awarded  Curious
Jun
12
comment Are all URL shorteners unsecure/vulnerable?
Right, but of course the question was referring to a third-party URL shortener if it wasn't explicit enough....
Jun
9
comment What is the difference between https://google.com and https://encrypted.google.com?
@EvanTeitelman, No it doesn't work, try it.
Jun
9
comment What is the difference between https://google.com and https://encrypted.google.com?
@Adnan, So this is all? I mean, they built encrypted.google.com just to do that referrer thing?
Jun
9
comment Encryption and the “security time decay” of prior encrypted data
What if the length of time is a couple thousand years?
Jun
9
comment Encryption and the “security time decay” of prior encrypted data
@ThomasPornin, Does using a longer key/bit-length guard against quantum computers?
Jun
9
comment referrer checking as a defence for XSS attack
@D.W., Yes I undestand that point. So it will help some kinds of XSS attacks, and it will not help other kinds of XSS attacks.
Jun
8
comment referrer checking as a defence for XSS attack
@D.W., Why do you say 'can help'? It will help some kinds of XSS attacks, not "can help".
Jun
7
accepted Is login limiting still needed if we employ multi-factor authentication?
Jun
7
comment Is login limiting still needed if we employ multi-factor authentication?
Hmm, 4 digits/5 minutes seems to be truly horrible. In any case, 6 digits per 30 seconds seems to be standard practice though.
Jun
7
revised Is login limiting still needed if we employ multi-factor authentication?
added 10 characters in body
Jun
7
asked Is login limiting still needed if we employ multi-factor authentication?
Jun
6
comment referrer checking as a defence for XSS attack
Btw, does the @D.W. in the question works like the @ in comments (a ping to his inbox)?
Jun
6
comment Are all URL shorteners unsecure/vulnerable?
But is it true that regardless of your knowledge, OWASP would still label it as a violator?
Jun
6
awarded  Teacher
Jun
6
accepted Are all URL shorteners unsecure/vulnerable?
Jun
6
comment Are all URL shorteners unsecure/vulnerable?
So you are saying that they violate OWASP top 10 and are by definition vulnerable?
Jun
6
revised referrer checking as a defence for XSS attack
edited body