2,058 reputation
417
bio website doxi-news.blogspot.com
location
age
visits member for 1 year, 4 months
seen 7 hours ago

sysadmin, waf-developer and skiddo-hunter


7h
comment Malicious *URLs*?
just read the paper; first impression: "will this ever end?"
7h
reviewed Approve suggested edit on Security implications for email address and url changes?
16h
awarded  Popular Question
2d
comment Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?
check out the source from zmap.io's suggestions: : "For older (dovecot) versions you will have to patch the source code." (Askubuntu: How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?)
2d
comment Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?
what @steffen said: "For older (dovecot) versions you will have to patch the source code." src: - Askubuntu: How do I patch/workaround SSLv3 POODLE vulnerability (CVE­-2014­-3566)?
2d
answered Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?
2d
reviewed Approve suggested edit on Why do I need to hide my phone's IMEI
Oct
28
reviewed Approve suggested edit on What are the insecure Protocols in terms of PCI DSS
Oct
24
comment Build only OpenSSL crypto?
dropped a note.
Oct
24
comment Build only OpenSSL crypto?
looks like a try&error - approach and heavy dependencies between all those modules
Oct
23
answered How can I verify that SSLv3 protocol is disabled?
Oct
23
comment nginx poodle fix configuration
maybe related: forum.nginx.org/read.php?2,254016
Oct
23
comment Best practice to secure an API of unknown structure that can come from end user device or server
nice find & nice read, one of the better explanation imho
Oct
23
comment Joomla Linux Permissions
dont need to if your run with suphp: suphp.org/Home.html
Oct
22
answered it is possible to decrypt HTTPS with the (private, public) pair if it uses DHE?
Oct
21
answered Ping Input box on web server vulnerable to piped commands?
Oct
13
comment SSL ciphers for nginx to support CloudFlare and CloudFront
> "CloudFront ... As of right now, that consists of SSL 3.0 and TLS 1.0" ... really?
Oct
12
revised SSL ciphers for nginx to support CloudFlare and CloudFront
added 1299 characters in body
Oct
12
answered SSL ciphers for nginx to support CloudFlare and CloudFront
Oct
7
comment Shellshock and PHP fastcgi
fastcgi seems safe, as long as you dont switch safe_mode on