kagali-san

116 reputation

	116 reputation	bio	website		visits	member for	2 years, 6 months
2 badges		location			seen	Mar 27 at 23:29

7 Actions

Dec 22	comment	How can I explain SQL injection without technical jargon? Did anyone seen a good, working, pure SQL injection not involving the hard, complex logic of ten middle layers, ORMs and NoSQL backends? Don't forget to mention that this mastery is a bit.. oldschool.
Aug 10	comment	Client-side cross-site access in SSL environment - when it's still possible to do? I also wonder which of these attacks are not causing browser to issue a warning.. will check later.
Aug 10	comment	Client-side cross-site access in SSL environment - when it's still possible to do? A self signed certificate with SSLRequire directive which can check if client's installed certificate matches server CA certificate and, possibly, certificate username/organizarionname (which are valid attributes for client ceritificate) criteria, can indeed prevent unknown users from accessng the erver.
Aug 10	awarded	Student
Aug 10	asked	Client-side cross-site access in SSL environment - when it's still possible to do?
Dec 21	answered	Securing the security guy's home office: what should we do?
Nov 21	awarded	Supporter