138 reputation
111
bio website w3dk.com
location United Kingdom
age 31
visits member for 2 years, 10 months
seen Apr 17 at 16:55

Stack Exchange Q&A site proposal: Joomla

profile for w3d on Stack Exchange, a network of free, community-driven Q&A sites


For some reason this question (from Oct 2010) has more recently been deleted but was still available on stackprinter.com. I had the accepted answer and was looking high and low for it to use as reference on another question.


Apr
11
comment The Problem with Changing All Passwords for HeartBleed
@scuzzy-delta: But why not change your password immediately if your password might have been compromised? (Even if you have to change it again after the server has been patched.) Is it because, if the server has been compromised (and the primary key is known) then changing your password will simply reveal your password to the attacker? But in this case simply logging in will reveal your password?
Mar
10
comment Does hiding version numbers increase my security?
Would an attacker (quite probably automated) run ... if (version ABC) {tryAttackXYZ()} or would they simply tryAttackXYZ()? I think the later would be more likely.
Feb
22
comment Is using SHA-512 for storing passwords tolerable?
But isn't the ability to brute force dependent on the underlying authentication system? If delays are enforced on failed authentication or the number of attempts are limited then how do you brute unless it is perhaps a distributed attack (but that could be slowed or even blocked) or the system itself has already been compromised?
Feb
8
awarded  Citizen Patrol
Jan
3
comment iPhone 5S security: Given someone's fingerprint can I use a 3D printer to create a fake finger with a real fingerprint on it?
@danielAzuelos: James Bond used a similar technique in "Diamonds Are Forever" (1971).
Dec
7
awarded  Teacher
Jul
15
awarded  Commentator
Jul
15
comment How to ensure that files uploaded by users do not contain any XSS code
Or maybe, "How to ensure that malicious files uploaded by users do not result in an XSS attack when used." ?
Jun
12
comment Chrome does not show green bar with EV SSL but firefox and IE does
@Richard: FWIW, both comodo.com and starfieldtech.com have exclamation marks against the same two fields as your cert ("Basic Constraints" and "Key Usage") and both of those domains display the green bar/company name and yours doesn't so those fields are unlikely to be the problem IMO.
Jun
12
comment Chrome does not show green bar with EV SSL but firefox and IE does
The example you give, https://www.comodo.com/, actually works OK for me in Chrome on Windows - I get the green bar and full company name in the address bar.
Jun
4
comment How can I monitor traffic of devices on my WiFi?
@Adnan: I realise this is way off topic, but "... make sure they exercise self-judgment" is not particularly realistic or sensible.
Mar
21
awarded  Notable Question
Feb
4
awarded  Informed
Dec
4
comment Security of email
@Ramhound: Why would it be "sent as plain text to Alice"? Alice is the one sending the email.
Nov
20
comment Webmail host knows my password
As mentioned in the comments at the top of the page; this doesn't necessarily mean that the password is stored in plain text, or does plaintextoffenders.com deal with more than just "plain text" offenders?
Nov
16
awarded  Scholar
Nov
16
accepted Is NAT Loopback on my router a security problem?
Nov
16
awarded  Popular Question
Sep
7
revised Password-free logins using your email address only?
Removed possibly incorrect statement that the password would last for the entire duration of the session.
Sep
7
answered Password-free logins using your email address only?