1,892 reputation
416
bio website doxi-news.blogspot.com
location
age
visits member for 1 year, 3 months
seen 9 hours ago

sysadmin, waf-developer and skiddo-hunter


1d
answered The correct way to check for vulnerability CVE-2014-7169 (aftershock)
Sep
25
answered Why are web servers ubiquitously configured by blacklisting inaccessible files instead of whitelisting the accessible ones?
Sep
24
awarded  Autobiographer
Jul
21
reviewed Approve suggested edit on How to prevent Cookie-Bombs?
Jul
21
asked How to prevent Cookie-Bombs?
Jul
20
revised Is php DOMDocument::loadXML completely secure?
stupido typos
Jul
16
revised PHP Object Injection Prevention - OWASP
deleted 1 character in body
Jul
16
comment benefits of xinetd for a web server
nagios-nrpe, (mostly custom) services that doesnt have any limitiation build-in AND where iptables-access for those who administer these services is not wanted. xinted is just a tcpwrapper, not a service itself. docs.fedoraproject.org/en-US/Fedora/11/html/Security_Guide/…
Jul
16
comment PHP Object Injection Prevention - OWASP
if (raw) user-input never reaches the unserialize() function you're a lot safer
Jul
16
answered Is php DOMDocument::loadXML completely secure?
Jul
16
answered PHP Object Injection Prevention - OWASP
Jul
7
comment What does this Snort rule do?
snort users manual, section 3 / writing snort rules might help
Jul
5
comment Is this a bot fishing for security vulnerabilities on my site?
@all: we surely need a canonical answer for this same type of question
Jul
4
revised Hundreds of legitimate IPs are hitting my website like bots
better readable logs
Jul
4
comment Hundreds of legitimate IPs are hitting my website like bots
so how does it come, one GET / returns a 301, anotherone returns a 200 OK??? looks fishy
Jul
4
suggested suggested edit on Hundreds of legitimate IPs are hitting my website like bots
Jul
4
comment Hundreds of legitimate IPs are hitting my website like bots
put nginx or varnish as short-term cache infront of it, problem solved
Jul
4
comment Is it possible to detect IDS name and version
yes, and it is also very very noisy, and it is more theoretical than pratical (but we did this, as a proof of concept for a thesis). beside this, i wanted this to be thinkbait for the op :D
Jul
3
comment Prevalence of offshoring in the Information Security Industry?
its a (local) phrase for: it's one and the same thing
Jul
3
comment Prevalence of offshoring in the Information Security Industry?
the offshoring-wave is heavily rolling back atm where we do business, at least for those who are emphasizing quality over quantity. i'd suggest your specialize in some areas. btw., (web) sec gets crowdsources nowadays, the same in green.