Reputation
43,709
Next tag badge:
163/100 score
19/20 answers
Badges
14 100 168
Impact
~1.6m people reached

Jun
6
comment Secure access to a Microsoft Access Database
Both those plans are bad ideas, because there's no good way to use Access ;)
Jun
6
revised WPA significantly less secure than WPA2?
edited tags
Jun
6
revised Attacks against HIDS software running on the same machine
edited tags
Jun
6
revised Determining vulnerable software on client machines
edited tags
Jun
6
comment Windows network specific attacks
@Sonny for the most part it would be mostly the same, though with differen common services around. One big difference, though, would be SPNEGO/NTLM all over the place, though by now it should be mostly Kerberos anyway. Also SMB, but thats just another protocol.
Jun
6
comment Cracking a linear congruential generator
aaagghh, too much math! +1, anyway... ;)
Jun
6
revised Bypassing hidden SSID and MAC filtering “protection”
edited tags
Jun
6
revised Is the level of traffic normal against my blocked ports?
edited tags
Jun
6
comment Most widespread use of PGP after 20 years
I agree with @atdre... "PGP benefits from very good integration and simple usage in many mailer softwares", and very bad integration in some other mail software...
Jun
6
revised How reliable is a write protection switch on a USB flash drive?
edited tags
Jun
6
revised General Question on FIPS requirements
edited tags
Jun
6
comment Should security question answers be case-sensitive?
Of course, "best practice" is not to use security questions. These should be better known as "in.security questions", since they are effectively a backdoor, and very complicated to implement securely.
Jun
6
revised Should security question answers be case-sensitive?
edited tags
Jun
6
answered How should I secure a contact form that appears on every page of a website?
Jun
6
comment How should I secure a contact form that appears on every page of a website?
The Roboo script is very interesting, its the right direction - I was going to recommend basic throttling, but Roboo takes that a couple steps further. (And, turns out it's by a friend of mine...wasnt aware of this, so thanks!)
Jun
6
comment How should I secure a contact form that appears on every page of a website?
There is some good stuff here, but also some bad stuff. The "hidden field" is nearly pointless, the only questionable value is preventing drive-by brute-force, and that only those that are not smart enough to handle hidden fields. Really anything clientside...
Jun
6
revised How should I secure a contact form that appears on every page of a website?
edited tags
Jun
6
revised Bypassing a reverse proxy/NAT
edited tags
Jun
6
comment Oldest security feature still in active use
Aherm, cough cough... @Thomas, I'm really not gonna get into a theological debate with you here ;)... But anyway, the hieroglyphs sounds interesting - do you have more info on that?
Jun
6
comment Oldest security feature still in active use
Not the oldest, the Bible has several examples of primitive ciphers.