2,348 reputation
517
bio website doxi-news.blogspot.com
location
age
visits member for 1 year, 10 months
seen Feb 23 at 6:22

sysadmin, waf-developer and skiddo-hunter


Feb
18
comment Basic nginx securing / restricted access
guide to nginx + ssl + spdy
Feb
15
reviewed Approve Secure way to store application settings
Feb
14
revised Is it safe to set up IP address to domain name redirection?
added 237 characters in body
Feb
14
answered Is it safe to set up IP address to domain name redirection?
Feb
14
answered Is it safe to store a passphrase encrypted SSH key in git?
Feb
14
answered Google Analytics: Hacked or Ghost Referers?
Feb
14
comment PHP Plugin Security
> write your own pre-processor to scan a submitted file for stuff you don't like - but this is really complex ... no, impossible. think "base64decode()", 'B' + 'a' + 'S' + 'e' ..., preg_replace and all other possible obfuscation-methods of mutating code and function_names.
Feb
5
reviewed Approve How frequently install patches in an enterprise environment?
Jan
16
comment Slow HTTP DoS Mechanics
could be slowloris as well, then you wouldnt see much in the logs of your webserver
Jan
14
answered Check SSLv3 in Apache Tomcat locally as well as on server on windows/linux
Dec
22
awarded  Good Answer
Dec
3
reviewed Approve How do the processes for digital certificates, signatures and ssl work?
Nov
30
reviewed Approve ElGamal for ECC - Not working with Edwards curves (ed25519)
Nov
27
comment Ensuring security of web based games and contests
yes, indeed. one solution to slow down automated submissions would be logins, or using unique emails for registering results.
Nov
27
comment Ensuring security of web based games and contests
seems more like a "how do i program right" - issue, no?
Nov
16
reviewed Approve Telnet Open, is this an exploit?
Nov
10
comment Can this be a DoS Attack?
you probably know this one; denyhosts or fail2ban might help in blocking malicious stuff out
Nov
9
comment Avast https scanning
what happens with certificate pinning?
Nov
5
comment how to test on which TLS Version has https connection established between server and a mobile application ( Android and iOS )?
the you should consult the libs your native app is build with.
Nov
5
comment how to test on which TLS Version has https connection established between server and a mobile application ( Android and iOS )?
arent there browser-addons available for this task?