115 reputation
6
bio website zzzzbov.com
location -
age 26
visits member for 2 years, 11 months
seen 1 hour ago
Have something to say? Send me an email:

zzzzBov at gmail dot com


Jul
17
awarded  Scholar
Jul
17
accepted Is + as an alternative to %20 an attack vector?
Jul
10
awarded  Student
Jul
10
asked Is + as an alternative to %20 an attack vector?
Mar
20
awarded  Commentator
Mar
20
comment How is an ATM secure?
@MarkAllen, any smart theif knows how to hide in plain sight. It might look strange to see someone walk up with a mask and glasses on, but no one would think twice if the person hopped off their motorcycle, left their helmet on to make a quick withdrawal.
Feb
21
comment Does disabling right click have any impact on security?
@Shadur, avoid FirstNiagara then.
Feb
21
comment Does disabling right click have any impact on security?
When my local HSBC branch was bought out by FirstNiagara, the online system switched to some service at openbank.com. I have since closed my accounts because I simply do not trust FirstNiagara with my money. Here's what you get when you right click.
Dec
13
comment Why don't people hash and salt usernames before storing them
"everyone knows that if they have a system that requires a password to log in, they should be storing a hashed & salted copy of the required password, rather than the password in plaintext." no, they don't. None of that is obvious to someone who is new to security. Even the difference between encryption and hashing is beyond what some people can understand.
Dec
12
awarded  Editor
Dec
12
revised How do I prevent this type of SQL injection attack?
URL encoding, not HTML entity. No wonder people have such a hard time with encodings...
Dec
11
suggested suggested edit on How do I prevent this type of SQL injection attack?
Nov
8
comment Attacking an office printer?
Every time I read the title of this question a certain cat comes to mind.
Oct
22
comment Why do we lock our computers?
In-line with the part about locking a house, few bystanders would question someone walking up to a house and entering through the front door. The assumption is that the person entering it has a reason to. If a bystander watches someone break into a window, they're much more likely to call the authorities. This is analogous with sitting down at a computer that's unlocked, vs physically hacking into the system after crawling under a desk.
Oct
3
comment Is Remotely wiping a cell phone really a valid defense?
Good point, I should have specified that my comment was meant for a personal context. But I suppose I should have been a little more careful with my words, this being Information Security and all.
Oct
3
comment Is Remotely wiping a cell phone really a valid defense?
You make the assumption that the type of person who steals a smartphone is smart enough to know how to wipe it of tracking software. Given that most petty thieves are typically in the low-income, low-education demographic, I wouldn't waste my time worrying about them wiping the tracking software.
Dec
5
comment Is it safe to store the password hash in a cookie and use it for “remember-me” login?
use server sessions. If you ever have to ask if it's safe, it isn't.
Oct
24
comment What file formats are known to be unsafe?
It's not an issue with a particular file type so much as an issue with default behaviors by programs expecting a particular file type. File extensions are simply hints as to the content. I can rename foo.exe to bar.jpg and then run it as an executable anyway.
Aug
3
awarded  Supporter
Aug
3
awarded  Autobiographer