207 reputation
110
bio website timothy.green.name
location
age
visits member for 3 years, 9 months
seen yesterday

A qualified chemist who somehow drifted into web development. I've learned (to a greater or lesser degree of accuracy) PHP and JavaScript, and would like to learn something completely different for the sake of it. I'm a weirdo who actually enjoys reading (and sometimes writing) technical documentation.


2d
revised “Authorized” Man in the middle
Fixed grammar and spelling.
Apr
18
revised Why do some bank websites use passwords that are not case sensitive?
Login: noun. Log in: phrasal verb. And we really don't need text-message abbreviations here, so I got rid of the awful w/.
Mar
27
revised Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
Tidied grammar.
Mar
24
revised Should I use urandom() or openssl_random_pseudo_bytes()?
Tidied grammar.
Feb
20
revised Why was the private key of the Superfish certificate so easily extractable?
Tidied grammar and link text.
Feb
10
revised What makes twitter different than other sites regarding users anonymity
Tidied grammar.
Feb
9
revised Why can protocols on higher layers be left unchanged?
Fixed grammatical error in title.
Feb
2
revised I can't access websites that use HTTPS, instead getting the message “your connection is not private”!
Incorporated information from comment.
Feb
2
revised What is Provable Security?
Improved grammar, title, and link text.
Jan
22
revised Why should I use whitelist on a WAF?
Corrected spelling, capitalisation, punctuation. Rewrote slightly.
Dec
15
revised Does injecting querystring values directly into HTML pose a security risk?
Typo: Day -> Say. RFC 2606: site.com -> example.com. Readability: Codeblock -> Blockquote. Other minor tweaks to grammar.
Nov
26
revised Can JavaScript be used to capture the user's screen?
Tidied grammar.
Nov
3
revised Is blocking a country's access to a website a good measure to avoid hackers from that country?
Tidied grammar. Retagged.
Oct
30
revised Why use a Smartcard for (Two Factor) Auth instead of another medium?
Tidied grammar.
Sep
25
revised The reason to insert Subject Alternative Names into CA certificate
RFC 2606 domain names.
Sep
23
revised Facebook password lowercase and uppercase
Please do try writing correctly henceforth. It makes people take you more seriously. (Seriously: double full stops and no spaces between sencences? Just ... what?!)
Sep
17
revised Trying to understand why signatures in root certs “are not used”?
Tidied grammar.
Sep
11
revised Is there any good reason to choose IDS over IPS?
Tidied grammar.
Aug
17
revised Is it better to have a camera hidden or visible?
Tided grammar of opening and closing paragraphs; completely rewrote middle paragraph. Removed redundant words from title: this is Security SE, so the security point of view can be assumed.
Jul
29
revised Break the popularity contest crypto
It's not a golf challenge: the tag is [popularity-contest].