Reputation
248
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 11
Newest
 Caucus
Impact
0 people reached

Feb
12
comment Website Login Security (Secure enough?)
As a remark, the Location header should properly take a full URL, including protocol and domain name. Most browsers understand it without, but this is not technically compliant with the standard.
Jan
27
comment What person should I write a penetration test report as?
Definitely not, @limbenjamin. Writers SE, possibly. They have a tag for technical writing.
Nov
22
comment Are SHA-2 certificates considered obsolete, or current?
@Mehrdad With an annoying pause.
Nov
21
comment Are SHA-2 certificates considered obsolete, or current?
Please don't use the horribly confusing American date style.
Aug
19
comment Password strength of random words and brainflayer
Well, it should be nor, @ryanc, but it's no longer unclear.
Aug
19
comment Password strength of random words and brainflayer
"Neither ... or ... don't ...." I'm confused.
Jul
21
comment What is the most secure way to protect a custom CMS from infiltration?
@mightyspaj. Maybe, maybe not. The point is that crypt() is difficult to use properly. Your custom function may or may not be using it correctly. password_hash() has been studied by some very fine minds, and is very simple to use. So use it.
Jul
14
comment Is it helpful to have a captcha on a login screen?
As a point of information, Register 365 have a CAPTCHA on their control panel login, so this is not unknown. (It's easy to bypass: just log in on the main site instead, then go to the control panel, so it's just pointless and annoying, but still, it's there.)
Jul
1
comment Is it neccessary that website certificate must have site URL?
"The www subdomain is treated as a special case." Source?
Jun
29
comment Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?
What makes a browser "official"? (I think the word you want is reputable.)
Apr
7
comment Is there any reason for using private key 2 times when creating security hash?
Is it two private keys? My reading of the question was that it was the same private key, used twice.
Mar
4
comment Untrusted connection visiting https://www.opensource.apple.com/
@Zboson. I vaguely recall that Internet Explorer is lax about certificate checking where the only difference is the www.
Nov
15
comment Content hashes to help protect resources being fetched from a CDN
Related? patents.stackexchange.com/q/4697/267
Oct
21
comment One liner to create passwords in linux?
Very similar to my function password_generate { head -c ${1-12} /dev/urandom | base64; }.
Sep
5
comment What does this javascript file do? Is this a virus?
Why would you be 100% sure about what sites other people have visited?
Jul
15
comment How to filter POST requests before they reach PHP on Apache?
Why are your usernames and passwords restricted to 16 characters?
Jun
23
comment How can I protect my eCommerce site from stolen credit cards?
The generic name for that kind of thing, @RodMacPherson, is 3D Secure. Visa, MasterCard, and American Express all follow the same standard.
Apr
24
comment How can I create a password that says “SALT ME!” when hashed?
@Rik. Code Golf SE is actually for programming puzzles in general. (See their popular "code-trolling" tag for some non-golf examples.)
Jan
24
comment Why are chips safer than magnetic stripes?
It really is hard to believe that the USA is still using non-chip cards. I think I vaguely remember my parents having those when I was a young kid.
Oct
7
comment How to be secure your page from Zeus Trojan?
An attack like what? (I'm not watching a YouTube video from work.)