35,348 reputation
465124
bio website cloud101.eu
location Belgium
age 25
visits member for 3 years, 9 months
seen 20 mins ago

I'm a security analyst and consultant, I'm here to learn and help others out.

Opinions are my own. Advice provided with no warranty.

Find me on http://cloud101.eu

Aviiiiiiiiiiiiiiiiiiiiiiid, Aviiiiiiiiiiiiiiid.


2h
comment User-friendly TLS certificate validation
That's why we have CAs...
18h
comment Showing bank routing/account numbers, and storing them safely
You want to put the encryption logic at application level and split it there. The reason is that if your decryption happens at SQL level, it can be that an attacker can SQLi and call the decryption method.
20h
comment Showing bank routing/account numbers, and storing them safely
The fact you're running everything on a single server is weird as well
20h
comment Showing bank routing/account numbers, and storing them safely
Might as well accept or avoid the risk then.
21h
answered Showing bank routing/account numbers, and storing them safely
1d
revised How can I find out who is behind a Mac address?
deleted 35 characters in body
1d
answered How can I find out who is behind a Mac address?
Apr
23
reviewed Delete My wifi has been hacked
Apr
23
reviewed Close Processes and tools for identifying security vulnerabilities
Apr
23
reviewed Leave Open Why does an exe's import Table have two refrences to kernel32.dll (or any other dll)?
Apr
23
reviewed Leave Open Can owasp-zap be configured to use a proxy?
Apr
23
reviewed Leave Open Why Armitage nmap results differs from msfconsole ones?
Apr
23
reviewed Close calculate time for preimage attack (hash creation time is known)
Apr
23
reviewed Close Consequences of disabling SSL2 and SSL3 on our webserver
Apr
23
reviewed Close My wifi has been hacked
Apr
23
reviewed Close “Transferring” SSL certificate to another person
Apr
23
reviewed Leave Open Options for keychain in Windows
Apr
23
reviewed Leave Open Encryption and decryption of plain text using stream cipher algorithm
Apr
23
reviewed Leave Open Https request call capture in Wireshark
Apr
23
comment External JS Security
No, it's either keep it external with a contract for liability or keep it locally and manually update.