2,574 reputation
726
bio website
location
age
visits member for 3 years, 1 month
seen 12 hours ago

19h
comment Obfuscated php code found on the server
Nice work decoding the whole script. I would like to add that you might want to monitor your webserver for requests with the HTTP_X_UP_DEVCAP_IMMED_ALERT headers. If they are not careful to use anonymizing services, you can find out who have planted this on your server.
20h
answered Obfuscated php code found on the server
23h
reviewed Looks OK Does figuring out what one password hashes to allow you to crack all identical passwords?
Aug
19
reviewed Close i am using college lan. What can i do to ensure maximum lan security?
Aug
19
comment Using last characters of hash as salt
If there is only one implemention of this scheme, what benefit do a rainbow table have? Will not a direct bruteforce be equally computationally expensive?
Aug
18
reviewed No Action Needed Strange name on “shared”, was I hacked?
Aug
18
reviewed Approve suggested edit on spam: several secret inboxes targeted at once. risk or coincidence?
Aug
18
reviewed No Action Needed Are Telegram secret chats secure assuming MTProto isn't?
Aug
18
reviewed No Action Needed Extract AES key by comparing plaintext and encrypted data
Aug
17
reviewed No Action Needed Anonymity on Facebook - how do they suggest people I should know?
Aug
15
revised random-string spam probe messages?
spelling
Aug
15
comment random-string spam probe messages?
There are no nameserver or whois records for these urls/domains - meaing that the links should have no effect. It might have earlier, or maybe they will in the future.
Aug
14
reviewed No Action Needed Standard practice for distributing server certificate for users
Aug
13
reviewed Approve suggested edit on Is it safe to store passwords on Google drive?
Aug
13
reviewed No Action Needed How is this SHA-1 hash generated?
Aug
12
reviewed Approve suggested edit on How do location-based apps avoid getting cheated by emulated GPS?
Aug
1
answered How do proxy servers protect their SSL certificates?
Jul
29
reviewed Approve suggested edit on Could a malicious JS file pointed on URL/URI attack the browser/computer?
Jul
29
reviewed Reviewed Apache logs, suspicious logging apach0day
Jul
29
comment Apache logs, suspicious logging apach0day
Nice solution, but this will only block clients after they have tried (successfully or not) to use this vulnerability. If you want a proactive, rather reactive approach, you have to rely on snort/suricata or apache modsecurity.