Reputation
21,259
Next tag badge:
80/100 score
26/20 answers
Badges
20 122 315
Impact
~1.4m people reached

Nov
19
asked I found a malicious website embedded in Malware spam. What should I do?
Nov
18
answered Preventing insecure webapp on subdomain compromise security of main webapp
Nov
18
comment How to block user from using GoToMyPC or Teamviewer
For what it's worth, GotoMyPc can use a Java launcher, and if Java is installed that may cause some unwanted headaches.
Nov
18
awarded  Custodian
Nov
18
revised Encryption key storage
edited body; edited tags
Nov
17
awarded  Nice Question
Nov
17
comment blocking direct access to files via url input while still allowing a script on server to access files
Salvador Dali - @D.W. has a more elaborate answer on REFERER blocking here
Nov
17
awarded  Nice Answer
Nov
16
revised xss wiki excerpt
Added detail according to D.W.'s answer here: http://security.stackexchange.com/a/24102/396
Nov
16
revised Which key usages are required by each key exchange method?
added 4 characters in body; edited tags
Nov
16
suggested approved edit on xss tag wiki excerpt
Nov
16
revised blocking direct access to files via url input while still allowing a script on server to access files
edited tags
Nov
16
comment Is there any known Malware for Windows Phone 7?
@Tony I +1'd this simply because you made a significant effort in trying to be constructive not to mention the quantity of downvotes is unfair in my opinion. I'll encourage you to continue the Stack Overflow sites, since you may learn that over time it helps with your technical writing. It helped me. see this related link
Nov
16
asked When distributing a CRL over HTTP, what is the optimal refresh time? What logic affects this decision?
Nov
16
revised Checklist on building an Offline Root & Intermediate Certificate Authority (CA)
added 505 characters in body
Nov
16
comment AIA/CRL locations for Offline Root
One thing I discovered about publishing CRLs in LDAP vs HTTP is that Only HTTP enables the use of the ETag and Cache-Control: Max-age headers providing better support for proxies and more timely revocation information. In addition, HTTP provides better heterogeneous support as HTTP is supported by most Linux, UNIX, and network device clients. Another reason to not use LDAP is because the revocation window can be smaller since there is no dependency on AD replication which can take 24-48 hours or more.
Nov
16
comment AIA/CRL locations for Offline Root
The Audio cable solution is very interesting! Do you have any more details on this?
Nov
16
revised AIA/CRL locations for Offline Root
added 61 characters in body; edited tags
Nov
15
accepted What reputable site should I download Putty from?
Nov
15
asked What reputable site should I download Putty from?