2,128 reputation
417
bio website doxi-news.blogspot.com
location
age
visits member for 1 year, 5 months
seen Nov 19 at 21:30

sysadmin, waf-developer and skiddo-hunter


Nov
16
reviewed Approve suggested edit on Telnet Open, is this an exploit?
Nov
10
comment Can this be a DoS Attack?
you probably know this one; denyhosts or fail2ban might help in blocking malicious stuff out
Nov
9
comment Avast https scanning
what happens with certificate pinning?
Nov
5
comment how to test on which TLS Version has https connection established between server and a mobile application ( Android and iOS )?
the you should consult the libs your native app is build with.
Nov
5
comment how to test on which TLS Version has https connection established between server and a mobile application ( Android and iOS )?
arent there browser-addons available for this task?
Nov
3
answered Specific Dangers in Joining a Linux Botnet?
Nov
3
reviewed Approve suggested edit on IPtables accepting SMTP without being configured?
Oct
31
comment Malicious *URLs*?
just read the paper; first impression: "will this ever end?"
Oct
31
reviewed Approve suggested edit on Security implications for email address and url changes?
Oct
30
awarded  Popular Question
Oct
29
comment Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?
check out the source from zmap.io's suggestions: : "For older (dovecot) versions you will have to patch the source code." (Askubuntu: How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?)
Oct
29
comment Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?
what @steffen said: "For older (dovecot) versions you will have to patch the source code." src: - Askubuntu: How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?
Oct
29
answered Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?
Oct
28
reviewed Approve suggested edit on Why do I need to hide my phone's IMEI
Oct
28
reviewed Approve suggested edit on What are the insecure Protocols in terms of PCI DSS
Oct
24
comment Build only OpenSSL crypto?
dropped a note.
Oct
24
comment Build only OpenSSL crypto?
looks like a try&error - approach and heavy dependencies between all those modules
Oct
23
answered How can I verify that SSLv3 protocol is disabled?
Oct
23
comment nginx poodle fix configuration
maybe related: forum.nginx.org/read.php?2,254016
Oct
23
comment Best practice to secure an API of unknown structure that can come from end user device or server
nice find & nice read, one of the better explanation imho