Reputation
Next tag badge:
159/100 score
19/20 answers
Badges
14 94 163
Newest
 Nice Answer
Impact
~1.5m people reached

Jun
5
comment How can I ensure that I connect to the right wireless Access Point?
This isnt really an answer, is it? Consider changing this to a comment....
Jun
2
revised IIS IP Address Restriction - can I rely on it online?
edited tags
Jun
1
revised How should I protect in-app Android payments when using a separate server?
edited tags
May
31
revised Are there any security problems with Google false start for TLS?
edited tags
May
31
revised Do security questions subvert passwords?
edited tags
May
31
comment Do security questions subvert passwords?
Note that the answers to these questions are not just shorter than passwords, they are typically dictionary words, and from a limited set of words at that. (e.g. "Favorite color"...). Also, knowing a person would make it even easier to "guess" the answers... And EVEN worse, these answers are often shared with other sites (as answers to "security questions"!!)... not to mention much of it is public record.
May
31
comment How to store my contacts encrypted?
this question seems to be missing some essential information to be answerable. Please update, or close...
May
31
revised How to implement non-password authentication in a web site
edited tags
May
31
revised How to determine what type of encoding/encryption has been used?
edited tags
May
31
comment OSes that are mathematically proven to be 100% (or 99%) secure?
And people. Dont forget about people, usually these are the biggest vulnerabilities... To reach 100%, you'd need to find a way to neutralize that threat.
May
31
revised Keystrokes to text converter method? (from an audio file, from previously recorded sounds of keystrokes)
edited tags
May
31
comment Could an Encrypted VG/Image compromised?
Correction, encryption is not designed to prevent modification, it provides confidentiality only. For integrity protection, you'd need a hash-based mechanism, such as HMAC, or digital signatures.
May
31
revised Could an Encrypted VG/Image compromised?
edited tags
May
31
revised wlan security - why is it not possible to protect against deauthentication flooding
edited tags
May
31
reviewed Approve Starting with sandbox development
May
31
revised Are malicious relying parties able to abuse OpenID logins?
edited tags
May
31
revised Risk of configuring MySQL for remote access with a dynamic IP address?
edited tags
May
31
revised Does Fedora 15 still use suid bits?
edited tags
May
31
comment Methods of mitigating threats from keyloggers
Antivirus would likely not solve this problem. More general anti-malware would have a (slightly) better chance...
May
31
comment What are effective ways to prevent targeted phishing?
Very nice. One addition / change I would make, wrt emails they send out - digitally signed emails are well supported by almost all current email clients, no reason not to use them.