222 reputation
111
bio website timothy.green.name
location
age
visits member for 4 years
seen 11 mins ago

A qualified chemist who somehow drifted into web development. I've learned (to a greater or lesser degree of accuracy) PHP and JavaScript, and would like to learn something completely different for the sake of it. I'm a weirdo who actually enjoys reading (and sometimes writing) technical documentation.


May
5
revised How is the session ID sent securely?
Tidied grammar (a smaller fix got in ahead of me).
May
5
suggested approved edit on How is the session ID sent securely?
Apr
27
comment How can I explain SQL injection without technical jargon?
No. It explains what you can achieve with SQL injection. It explains precisely nothing about what SQL injection is. And slut-shaming is boring, unpleasant, and unwarranted on a "professional" site.
Apr
26
comment How can I explain SQL injection without technical jargon?
This does not in any way answer the question. It's merely a puerile joke, and contributes nothing valuable to this site.
Apr
23
revised “Authorized” Man in the middle
Fixed grammar and spelling.
Apr
23
suggested approved edit on “Authorized” Man in the middle
Apr
18
revised Why do some bank websites use passwords that are not case sensitive?
Login: noun. Log in: phrasal verb. And we really don't need text-message abbreviations here, so I got rid of the awful w/.
Apr
18
suggested approved edit on Why do some bank websites use passwords that are not case sensitive?
Apr
7
comment Is there any reason for using private key 2 times when creating security hash?
Is it two private keys? My reading of the question was that it was the same private key, used twice.
Mar
27
revised Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
Tidied grammar.
Mar
27
suggested approved edit on Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
Mar
24
awarded  Yearling
Mar
24
revised Should I use urandom() or openssl_random_pseudo_bytes()?
Tidied grammar.
Mar
24
suggested approved edit on Should I use urandom() or openssl_random_pseudo_bytes()?
Mar
4
comment Untrusted connection visiting https://www.opensource.apple.com/
@Zboson. I vaguely recall that Internet Explorer is lax about certificate checking where the only difference is the www.
Feb
20
revised Why was the private key of the Superfish certificate so easily extractable?
Tidied grammar and link text.
Feb
20
suggested approved edit on Why was the private key of the Superfish certificate so easily extractable?
Feb
10
revised What makes twitter different than other sites regarding users anonymity
Tidied grammar.
Feb
10
suggested approved edit on What makes twitter different than other sites regarding users anonymity
Feb
9
revised Why can protocols on higher layers be left unchanged?
Fixed grammatical error in title.