31,501 reputation
454108
bio website cloud101.eu
location Belgium
age 24
visits member for 3 years, 3 months
seen 12 hours ago

I'm a security analyst and consultant, I'm here to learn and help others out.

Opinions are my own. Advice provided with no warranty.

Find me on http://cloud101.eu


Oct
15
comment What's the impact of POODLE to the Internet?
Vote to close as duplicate.
Oct
6
answered PCI Compliance Check-list
Oct
4
awarded  php
Oct
3
answered How does DHCP starvation work? How to prevent it?
Oct
3
revised How secure are PHP sessions?
edited body
Oct
3
answered How secure are PHP sessions?
Oct
1
answered How can we represent SSL and Firewall in OSI Model?
Sep
30
awarded  Explainer
Sep
25
comment What is the main function of xp_cmdshell in SQL Server and what are its related security issues?
I think that by default it's switched off and only SA has access to it (which should never be used to run queries).
Sep
25
answered What is the main function of xp_cmdshell in SQL Server and what are its related security issues?
Sep
23
comment how can we find the CSRF vulnerability in a website?
@AnanduMDas if you want to test properly you should read the complete OWASP guide.
Sep
18
answered Any advice on how to assure patients that a medical facility is well protected against identity theft?
Sep
17
comment My IP address (with a NAS) is targeted by a hacker. What to do? Should I be worried?
@DanNeely Ah yea sorry, I forgot, that's a complete valid reason to drop security.
Sep
15
comment My IP address (with a NAS) is targeted by a hacker. What to do? Should I be worried?
Why have you attached your NAS to the internet?
Sep
15
awarded  Good Answer
Sep
14
revised How To Patch LFI Vulnerability
added 4 characters in body
Sep
13
answered Does company email can access hangouts and private emails?
Sep
12
awarded  Enlightened
Sep
12
awarded  Nice Answer
Sep
12
comment Is my custom password hashing algorithm insecure?
PBKDF2 is NIST and FIPS approved, scrypt is theoretically stronger than bcrypt but less vetted. Either way PHP's function uses bcrypt, so I'd just go with the built in PHP function. All crypto resources can be found on this site (search button at the top) look for Thomas Pornin's answers.