Reputation
1,939
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 14 23
Newest
 Yearling
Impact
~141k people reached

  • 0 posts edited
  • 0 helpful flags
  • 26 votes cast
Nov
8
comment Save private messages encrypted in database
What are you trying developing? It reminds me PGP encryption Such level of security is more than anything that I ever saw… Are you sure that it is not HUGE overkill? (Unless you are developing new messaging site for CIA agents)
Nov
7
asked Concerns of data being on the cloud
Nov
7
comment CSRF protection needed for clients that don't accept cookies?
What is business impact of CSRF attack? Someone can trade on stock market? Add comment to blog? When you know what is the impact of the attack you can decide how/if you need to deal with it.
Nov
7
awarded  Peer Pressure
Nov
7
answered PHP/JavaScript with RSA
Nov
5
comment Storing credit cards for automatic payments?
They are PCI compliant as an infrastructure, you still need to be PCI compliant on application level
Nov
3
awarded  Autobiographer
Nov
3
answered Is my Company Tracking Me?
Nov
2
comment How serious is InstallIQ?
According Wikipedia "Adware, or advertising-supported software, is any software package which automatically plays, displays, or downloads advertisements to a computer." en.wikipedia.org/wiki/Adware, so "Adware is Adware"
Nov
2
answered How serious is InstallIQ?
Nov
2
answered Risks with Amazon S3 and costs
Nov
1
answered Am I required to hash passwords
Nov
1
revised Why banking websites always ask me to authenticate my PC even after I'd chosen to “Remember my Computer”?
edited tags
Oct
31
answered Is there a superior approach for threat modeling?
Oct
28
answered How to catch a gmail hacker/money-scammer? (in conversation with one right now!)
Oct
27
comment Securely signing a container package
Again, that exactly what I wrote, but what ever
Oct
27
comment Securely signing a container package
He is not talking about signing SW distribution package, rather to sign some data that his program uses. Because it is desktop application it can be decompiled and the signature check removed in any case.
Oct
27
comment Securely signing a container package
That exactly what I wrote
Oct
27
answered Securely signing a container package
Oct
27
awarded  Critic