129 reputation
3
bio website dragonzone.net
location Texas
age 24
visits member for 3 years, 1 month
seen 2 days ago
Computer Science undergraduate student at the University of Texas at Dallas.

Jun
24
comment How do you keep track of numerous keys in the workplace?
Put the key inside a ziplock baggie and tape it next to the lock. This is what I do with screws that go with a particular piece of hardware that I don't want to lose! ;)
Jun
20
comment What can and can't a malicious DNS do?
@FrankThomas That article makes some grand assumptions which are false. It is actually very difficult to MITM attack an SSL connection. The NSA could potentially do it, but that would require them to gag-order one of the root CA to sign a wildcard signing key. Otherwise, if you can trust the root CAs in your browser (i.e., not your work computer), then you can trust the SSL connection. Certificate pinning will even stop the NSA from doing a MITM attack.
Jul
6
comment Do browsers allows pages loaded on one tab to access/intercept/inject data in other tabs?
@jairo It's far from baseless, as "cross-site scripting attacks" were fairly common a few years back. I'd say that the concerns are growing on out-dated as the web has changed and adapted to protect against them, but the problems are still useful to know and understand. I haven't had a chance to actually watch the video yet.
Jul
6
comment Do browsers allows pages loaded on one tab to access/intercept/inject data in other tabs?
@jairo No, it depends on the browser. I believe Chrome / Firefox will block such a request because it detects that "mybank.hackersite.com" is trying to send a XmlHTTPRequest to "mybank.com", which is a different domain name (see the "same origin policy" stuff).
Jul
6
awarded  Teacher
Jul
6
answered Do browsers allows pages loaded on one tab to access/intercept/inject data in other tabs?
Jul
12
awarded  Supporter
Jul
12
awarded  Autobiographer