222 reputation
111
bio website timothy.green.name
location
age
visits member for 4 years
seen yesterday

A qualified chemist who somehow drifted into web development. I've learned (to a greater or lesser degree of accuracy) PHP and JavaScript, and would like to learn something completely different for the sake of it. I'm a weirdo who actually enjoys reading (and sometimes writing) technical documentation.


Jul
28
revised How exactly does the Stagefright Vulnerability work on Android?
Fixed title: quotation marks are not for emphasis. Improved link text.
Jul
25
revised What prevents a man in the middle from requesting a certificate for your server?
RFC 2606. Grammar.
Jul
23
revised Git server security
Spelling: bare -> bear and others. Improved link text ("this post").
Jun
17
revised Use of obscure URL for security
form -> from. RFC2606 domain name. Added a necessary comma to clear up a garden-path sentence.
May
26
revised What is the role of RSA in ECDHE-RSA?
Tidied grammar.
May
11
revised How are digital certificates compared?
Tidied grammar.
May
8
revised What is the most security benefit of a clean desk policy?
Fixed link text (link on B). Parenthetical (book title, "like paperwork") remarks in comma-pairs (a comma before and after the remark). Book title in italics.
May
5
revised How is the session ID sent securely?
Tidied grammar (a smaller fix got in ahead of me).
Apr
23
revised “Authorized” Man in the middle
Fixed grammar and spelling.
Apr
18
revised Why do some bank websites use passwords that are not case sensitive?
Login: noun. Log in: phrasal verb. And we really don't need text-message abbreviations here, so I got rid of the awful w/.
Mar
27
revised Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”
Tidied grammar.
Mar
24
revised Should I use urandom() or openssl_random_pseudo_bytes()?
Tidied grammar.
Feb
20
revised Why was the private key of the Superfish certificate so easily extractable?
Tidied grammar and link text.
Feb
10
revised What makes twitter different than other sites regarding users anonymity
Tidied grammar.
Feb
9
revised Why can protocols on higher layers be left unchanged?
Fixed grammatical error in title.
Feb
2
revised I can't access websites that use HTTPS, instead getting the message “your connection is not private”!
Incorporated information from comment.
Feb
2
revised What is Provable Security?
Improved grammar, title, and link text.
Jan
22
revised Why should I use whitelist on a WAF?
Corrected spelling, capitalisation, punctuation. Rewrote slightly.
Dec
15
revised Does injecting querystring values directly into HTML pose a security risk?
Typo: Day -> Say. RFC 2606: site.com -> example.com. Readability: Codeblock -> Blockquote. Other minor tweaks to grammar.
Nov
26
revised Can JavaScript be used to capture the user's screen?
Tidied grammar.