604 reputation
47
bio website kaeding.name
location Boston, MA
age 32
visits member for 3 years, 8 months
seen Jul 9 at 13:07
I am a software developer living in Boston. When I'm not on the computer, I may be brewing beer.

Jul
15
awarded  Yearling
May
5
awarded  Nice Answer
May
2
answered Can someone explain the “Covert Redirect” vulnerability in OAuth and OpenID?
Dec
5
awarded  Enlightened
Dec
5
awarded  Nice Answer
Nov
22
awarded  Yearling
Nov
22
awarded  Yearling
Aug
14
awarded  Nice Answer
Jun
1
comment How can I ensure that I connect to the right wireless Access Point?
@Bill Weiss, I think @Rakkhi meant FireSheep, which would allow the attacker to easily grab the passing login cookies, and impersonate the victim on many websites that don't use HTTPS for all their traffic.
Feb
18
comment What is your way to create good passwords that can actually be remembered?
@StasM, yeah, I have also abandoned this method, as a matter of fact. I now forget about trying to remember passwords, since it is not practical to have a secure password, that you don't use in multiple places. I now use a password management program (1Password is what I use, but there are others that are probably just as good). So, I just remember one secure password, and I type that into 1Password. 1Password remembers all my passwords, and generates new ones randomly when I need a new one.
Dec
22
comment Security review: “HTTP header user-agent has been set to (something)”
I believe that @rox0r is saying that Header data should be treated like any other user submitted data, such as form data, etc. You need to deal with it carefully to avoid SQL injection and XSS vulnerabilities. This doesn't mean you need to disallow requests from user-agents with weird values, but you just need to take the necessary precautions to be sure you don't use that data in an unsanitized manner.
Nov
30
answered Persisting and comparing NMAP scans
Nov
29
comment What is your way to create good passwords that can actually be remembered?
@nealmcb good point. I thought this was a clever method of coming up with passwords. I'm not really sure that I agree that the number of 'popular' songs is so small; what defines 'popular'? I would agree that songs Elvis's songs are among the most popular, but you can pick a song that is less mainstream-popular, yet has special meaning to you. You also don't have to pick a line from the chorus; you can pick a line from a verse.
Nov
29
comment What is your way to create good passwords that can actually be remembered?
@tttppp ahh, good catch!
Nov
29
revised What is your way to create good passwords that can actually be remembered?
added 1 characters in body
Nov
22
answered Is SOCKS secure?
Nov
22
awarded  Teacher
Nov
22
answered What is your way to create good passwords that can actually be remembered?
Nov
22
awarded  Editor
Nov
22
comment Is it possible to take down a site using javascript in the URL bar?
@Moshe cool, I'm glad that helped. I added a bit to my answer about where the problem in such a site would exist (its not in the javascript) and how to protect your site.