116 reputation
2
bio website
location
age
visits member for 3 years, 5 months
seen Mar 27 '13 at 23:29

Dec
22
comment How can I explain SQL injection without technical jargon?
Did anyone seen a good, working, pure SQL injection not involving the hard, complex logic of ten middle layers, ORMs and NoSQL backends? Don't forget to mention that this mastery is a bit.. oldschool.
Aug
10
comment Client-side cross-site access in SSL environment - when it's still possible to do?
I also wonder which of these attacks are not causing browser to issue a warning.. will check later.
Aug
10
comment Client-side cross-site access in SSL environment - when it's still possible to do?
A self signed certificate with SSLRequire directive which can check if client's installed certificate matches server CA certificate and, possibly, certificate username/organizarionname (which are valid attributes for client ceritificate) criteria, can indeed prevent unknown users from accessng the erver.
Aug
10
awarded  Student
Aug
10
asked Client-side cross-site access in SSL environment - when it's still possible to do?
Dec
21
answered Securing the security guy's home office: what should we do?
Nov
21
awarded  Supporter