Reputation
43,819
Next tag badge:
164/100 score
19/20 answers
Badges
14 101 168
Impact
~1.7m people reached

Jun
6
comment Oldest security feature still in active use
Aherm, cough cough... @Thomas, I'm really not gonna get into a theological debate with you here ;)... But anyway, the hieroglyphs sounds interesting - do you have more info on that?
Jun
6
comment Oldest security feature still in active use
Not the oldest, the Bible has several examples of primitive ciphers.
Jun
6
comment Suggestion setting up a SQL injection honeypot
@Rook did you read the question? No where did he ask about how to secure his app, no need for condescension. The OP was explicitly and clearly asking for tips on setting up a honeypot.
Jun
5
comment Suggestion setting up a SQL injection honeypot
@Rook, I think you missed the point of the question in the first place - this is an intentionally vulnerable app, intended to serve as a honeypot. That was the actual question. +1.
Jun
5
comment Suggestion setting up a SQL injection honeypot
I'm curious, this really is not answering the question that was asked...??
Jun
5
comment xml library vulnerabilities, regarding post-exploitation
why do you keep calling it xml, but you're talking about an XLS file, no? I don't think that matters - it's either the VBA scripts (do these work on mac?), or a generic trojan / malware.
Jun
5
revised xml library vulnerabilities, regarding post-exploitation
edited tags
Jun
5
revised What evaluation criteria would you use for an Oracle scanning tool?
edited tags
Jun
5
reviewed Approve Is it illegal to read an e-mail that was accidentally sent to you?
Jun
5
revised Elaborate websockets security
edited tags
Jun
5
answered Is it illegal to read an e-mail that was accidentally sent to you?
Jun
5
comment Is it illegal to read an e-mail that was accidentally sent to you?
This is not accurate, U.S. postal law is not about contractual agreements.
Jun
5
comment Is it illegal to read an e-mail that was accidentally sent to you?
did you receive permission from out-law.com to copy this text? According to out-law.com/page-292, freely copying a single paragraph is permitted, but more than that requires permission. Dont wanna mess with 'em, they be lawyers!
Jun
5
comment Security implications of storing the password hash along an encrypted AES key
@Normand, just to emphasize, the AES key is encrypted with the password, which is never stored, and not with the stored hash, correct?
Jun
5
revised Security implications of storing the password hash along an encrypted AES key
edited tags
Jun
5
revised Secure mount options + partitioning on Ubuntu
edited tags
Jun
5
revised Recommend Keylogger for Ubuntu?
edited tags
Jun
5
revised IPTables default security rules for a gateway/router?
changed "defacto" to "default" - if this is not what was meant, please revert
Jun
5
comment Where to download OpenBSD release ISO's over HTTPS?
small nitpick - the SHA256 takes care of integrity, not authentication (a file isnt who anything... its a what). The GPG signing takes care of authenticity, that the hash is the correct hash (i.e. created by the correct entity).
Jun
5
revised Where to download OpenBSD release ISO's over HTTPS?
edited tags