meta user
network profile
| bio | website | lamontconsulting.com |
|---|---|---|
| location | New York, NY | |
| age | 36 | |
| visits | member for | 2 years, 6 months |
| seen | 56 mins ago | |
| stats | profile views | 641 |
The following message is ROT26 encrypted:
SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:
TLSA (formerly DANE for DNS) Fixes the hackable CA problem
TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack
About me
I have no relation to the above sites; I am just an advocate
Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)
See ...my LinkedIn profile
Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk
|
Mar 29 |
comment |
What possible use does an iFrame have for security? I think I need a working sample I can learn from and adapt. I'm still missing "something". Are there any sites out there I can compare implementations with? (I feel bad I'm consuming this many comments, this is a record for me) |
|
Mar 29 |
revised |
Security risks with JSONP? added 6 characters in body |
|
Mar 29 |
revised |
Security risks with JSONP? added 140 characters in body |
|
Mar 29 |
answered | Security risks with JSONP? |
|
Mar 29 |
comment |
What is the “about:blank” context for browser security and privacy? @rook I'm soon going to experiment with an iFrame with src=about:blank. Test cases and other ideas are welcome |
|
Mar 29 |
comment |
Why is the same origin policy so important? This was incredibly helpful to me. Can you elaborate on the iFrame case? Can a parent access child variables and vice versa? (sameorigin, ignoring sandbox and restricted configurations) |
|
Mar 29 |
revised |
What is the “about:blank” context for browser security and privacy? added 4 characters in body; edited title |
|
Mar 29 |
asked | What is the “about:blank” context for browser security and privacy? |
|
Mar 29 |
comment |
How bad is a Self Contained XSS attack? As of 3/29, that domain is available for registration |
|
Mar 29 |
revised |
Effectiveness of Security Images edited tags |
|
Mar 29 |
revised |
Is Yahoo SignIn Seal effective at phishing prevention? edited tags |
|
Mar 29 |
revised |
Banking application login leaks information edited tags |
|
Mar 29 |
revised |
What is this authentication method/approach called? edited tags |
|
Mar 29 |
revised |
Is SiteKey a valid defense against Phishing? edited tags |
|
Mar 29 |
comment |
What possible use does an iFrame have for security? Is there a reference implementation (source code, or live) I feel like I might be re-inventing something that exists. .lastChild.firstChild. is null for a non injected form so I need to accomodate that. This is getting bigger by the moment |
|
Mar 29 |
comment |
What possible use does an iFrame have for security? (I deleted my last comment, it was no good). Once the token is exposed in the iframe, how is it used? I think if the variable is copied to the Parent in any form, it is vulnerable. I'm envisioning a Prototype function "listening" for the secret, sending it off, and using it. |
|
Mar 29 |
reviewed | Approve suggested edit on Sanitizing JavaScript to prevent XSS |
|
Mar 29 |
reviewed | Approve suggested edit on some questions about DOM based XSS |
|
Mar 28 |
comment |
What possible use does an iFrame have for security? I made an edit to illustrate code that worked. It wasn't something I could paste into comments or put into an edit queue. Please edit/delete/revise as needed. |
|
Mar 28 |
revised |
What possible use does an iFrame have for security? added 73 characters in body |
