147 reputation
111
bio website w3dk.com
location United Kingdom
age 32
visits member for 3 years, 5 months
seen Nov 10 at 19:25

Stack Exchange Q&A site proposal: Joomla

profile for w3d on Stack Exchange, a network of free, community-driven Q&A sites


For some reason this question (from Oct 2010) has more recently been deleted but was still available on stackprinter.com. I had the accepted answer and was looking high and low for it to use as reference on another question.


Jul
11
revised Should I let a user know they have entered an unknown username or email address?
Changed title, the question isn't actually about passwords.
Jul
11
suggested suggested edit on Should I let a user know they have entered an unknown username or email address?
Jun
24
revised Won't all hashes collide after enough iterations (with a static salt)?
Spelling in title, presumably should be "static salt", not "static hash" in opening paragraph.
Jun
24
suggested suggested edit on Won't all hashes collide after enough iterations (with a static salt)?
May
13
comment Is there a way to check the filetype of a file uploaded using PHP?
There is a "good" answer to this already somewhere on the Stack Exchange network (was it this site?). But basically there is no full proof way. You need to secure your system, rename the file, stream it, etc. so that when "opened" it won't compromise your system.
May
1
comment How to access directories disallowed in robots.txt?
"but they are not accessible in browser" - If they are not accessible then either they don't exist, or there is something else that is blocking them. "robots.txt" is only an advisory document for good bots.
May
1
comment How to access directories disallowed in robots.txt?
"not to index certain folders" - actually, it tells the good bots not to crawl certain files and folders. Disallowed pages can still be indexed (link only), particularly if other pages are linking to them.
Apr
11
comment The Problem with Changing All Passwords for HeartBleed
@scuzzy-delta: But why not change your password immediately if your password might have been compromised? (Even if you have to change it again after the server has been patched.) Is it because, if the server has been compromised (and the primary key is known) then changing your password will simply reveal your password to the attacker? But in this case simply logging in will reveal your password?
Mar
10
comment Does hiding version numbers increase my security?
Would an attacker (quite probably automated) run ... if (version ABC) {tryAttackXYZ()} or would they simply tryAttackXYZ()? I think the later would be more likely.
Feb
22
comment Is using SHA-512 for storing passwords tolerable?
But isn't the ability to brute force dependent on the underlying authentication system? If delays are enforced on failed authentication or the number of attempts are limited then how do you brute unless it is perhaps a distributed attack (but that could be slowed or even blocked) or the system itself has already been compromised?
Feb
8
awarded  Citizen Patrol
Jan
3
comment iPhone 5S security: Given someone's fingerprint can I use a 3D printer to create a fake finger with a real fingerprint on it?
@danielAzuelos: James Bond used a similar technique in "Diamonds Are Forever" (1971).
Dec
7
awarded  Teacher
Jul
15
awarded  Commentator
Jul
15
comment How to ensure that files uploaded by users do not contain any XSS code
Or maybe, "How to ensure that malicious files uploaded by users do not result in an XSS attack when used." ?
Jun
12
comment Chrome does not show green bar with EV SSL but firefox and IE does
@Richard: FWIW, both comodo.com and starfieldtech.com have exclamation marks against the same two fields as your cert ("Basic Constraints" and "Key Usage") and both of those domains display the green bar/company name and yours doesn't so those fields are unlikely to be the problem IMO.
Jun
12
comment Chrome does not show green bar with EV SSL but firefox and IE does
The example you give, https://www.comodo.com/, actually works OK for me in Chrome on Windows - I get the green bar and full company name in the address bar.
Jun
4
comment How can I monitor traffic of devices on my WiFi?
@Adnan: I realise this is way off topic, but "... make sure they exercise self-judgment" is not particularly realistic or sensible.
Mar
21
awarded  Notable Question
Feb
4
awarded  Informed