2,108 reputation
31231
bio website
location Montreal, Canada
age 24
visits member for 2 years
seen 4 hours ago
  • Information Security hobbyist

  • Addicted to Hard Dance Music

  • Has a weakness for Turbocharged Boxer engines

  • Somehow became (sort of) a fan of steamed broccoli


2h
awarded  Guru
10h
awarded  Yearling
10h
revised How long should an e-mail address confirmation link last and why must it expire at all?
Removed unnecessary emphasis and 1 character
14h
awarded  Custodian
23h
awarded  Good Answer
1d
revised If a web site shows me what my password was changed to, is it stored as plain text?
Forgotten words.
1d
awarded  Enlightened
1d
awarded  Nice Answer
1d
answered If a web site shows me what my password was changed to, is it stored as plain text?
2d
reviewed No Action Needed PCI DSS Requirements that need to be covered regarding mainframes
Mar
22
reviewed No Action Needed Is PIN-protected token with login certificate a two-factor authentication if the token is controlled solely by the user?
Mar
22
comment XSS via REQUEST_URI
The point of XSS is that you do not have access to the server-side code.
Mar
22
reviewed No Action Needed Why were CBC_SHA256 ciphersuites like TLS_RSA_WITH_AES_128_CBC_SHA256 defined?
Mar
21
reviewed No Action Needed Is it possible to set up a second router with the same SSID to get the password?
Mar
16
reviewed Reviewed Is it possible to install Kali Linux on a windows tablet?
Mar
12
reviewed No Action Needed How secure is my information on a bootable USB drive?
Mar
12
reviewed No Action Needed How secure is my information on a bootable USB drive?
Mar
12
reviewed No Action Needed How to know if I'm using openSSL properly
Mar
5
comment Possible Injection to PHP PDO
From php.net/manual/en/pdo.prepared-statements.php: "The parameters to prepared statements don't need to be quoted; the driver automatically handles this. If an application exclusively uses prepared statements, the developer can be sure that no SQL injection will occur...". You got downvoted because you should have read the manual before posting this question.
Feb
21
reviewed No Action Needed Should I worry if my credit card payment processor's server allows only weak SSL cipher suites?