Reputation
22,939
Next tag badge:
136/100 score
16/20 answers
Badges
3 43 106
Newest
 Good Answer
Impact
~1.4m people reached

Feb
23
comment How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
@HagenvonEitzen - For HTML sanitation there is a good solution of just escaping <>&'" to their HTML escaped versions e.g., &lt; that the browser specifically should not invoke, and just because you saw <scr<script>> doesn't necessarily imply an attack -- it could be a generic discussion like what we are having where someone forgot to escape. Granted, I agree with your approach to sanitation if you are sure its an attack of some sort. E.g., if a POST variable came from a pull down form and there's an unexpected value -- that could mean someone's attacking/probing you.
Feb
22
comment Can I determine which algorithm was used if I know the matching hash of a given input?
Well not completely incorrectly; he just dropped the bytes that that aren't printable ASCII (roughly half of them). base64.decodestring('Tut0nlFFZ9sLVhPE5x81lQ==') gives me 'N\xebt\x9eQEg\xdb\x0bV\x13\xc4\xe7\x1f5\x95' or '4e eb 74 9e 51 45 67 db 0b 56 13 c4 e7 1f 35 95` as bytes (in hex).
Feb
22
awarded  Nice Answer
Feb
22
comment How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
@CodesInChaos - Agree. I'm not advocating someone builds their own HTML sanitizer. Its saner to just use a safe lightweight markup language (where symbols like < are automatically escaped to &lt; and whitelisted safe HTML elements are inserted) or well-tested HTML purifier, and have said this more than once. However, this is a clear example of bypassing non-recursive filtering (see example 5 ).
Feb
22
revised How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
added 95 characters in body
Feb
22
answered How is “<scrscriptipt>” or “selselectect” used to avoid filtering?
Feb
21
revised HTTPS verification failed - get certificate information iPad/iPhone
added 210 characters in body
Feb
21
answered HTTPS verification failed - get certificate information iPad/iPhone
Feb
21
comment Does disabling right click have any impact on security?
+1 - I somehow missed your answer until right after I posted something very similar. I suspect this is the case, though obviously there are saner ways of doing preventing back/forward navigation from double committing a transaction.
Feb
21
answered Does disabling right click have any impact on security?
Feb
21
reviewed Approve Checking if notebook is clean of hardware spyware
Feb
20
revised What is the point of hashing passwords?
added 150 characters in body
Feb
20
awarded  Nice Answer
Feb
19
answered non-periodic event detection
Feb
18
answered Strategies to store/remember very long password?
Feb
18
comment Strategies to store/remember very long password?
Great answer; however its incompatible with your accepted answer to the referenced question -- use a one-time-pad. A one-time pad cannot be derived from a 128-bit entropy passphrase to encode anything longer than ~128-bits and still benefit from the unbreakable properties of being a OTP. In fact, using a one-time pad generated from a ~128 bit passphrase will more likely be easily breakable with standard cryptographic techniques.
Feb
17
reviewed Reject What is ASN.1 usage in SSL protocl and What's the risk of using it?
Feb
17
awarded  Custodian
Feb
17
reviewed Approve Need advice on linux server being hacked
Feb
16
comment An attack from my Employer
Expect your boss to monitor (and potentially alter) any sites you visit unless you encrypt your data. Only trust https/ssh/vpn or similar (with trusted keys or known fingerprints) for secret info. This prevents man in the middle attacks or eavesdropping on anything other than the level of traffic and the IP address you are communicating with. As Bob Watson's great advice, a SOCKS proxy is simple to setup with ssh (setup ssh server at yourdomain.com, go to terminal run ssh -fND localhost:12321 you@yourdomain.com and in a browser setup SOCKS proxy to port 12321) to encrypt all your traffic.