450 reputation
210
bio website
location
age
visits member for 3 years, 2 months
seen Oct 10 at 2:39

Sep
11
comment Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
Wouldnt you still be liable for the charges on the credit card?
Jul
25
comment Can sites which check your password as you type pose a security risk?
You can use fiddler to determine if its actually hitting the server with every keypress. And I assume it does pose a security risk since it makes bruteforce much easier (essentially xn instead of x^n attempts required)
Jul
25
asked Isnt the 3D secure system essentially completely ineffective in avoiding fraud?
May
6
answered What's the point of EMV when only the card is needed to shop online?
Mar
10
awarded  Commentator
Mar
10
accepted How is a “commonly used password” determined?
Mar
10
comment How is a “commonly used password” determined?
Using a static list does seem to have a major pitfall of not being updated frequently due to newly popular passwords ( xkcd.com/936 )
Mar
8
comment Why are there few (none?) easy to use encryption libraries?
Windows has DPAPI for thick clients
Mar
8
asked How is a “commonly used password” determined?
Nov
17
awarded  Yearling
Aug
14
comment Is it safe to show users why their password is not allowed?
Out of curiosity, why a "Too long" constraint? My limited understanding says that once you hash the password, it should be irrelevant
Jun
12
awarded  Citizen Patrol
Dec
6
accepted SQL — using string concatenation, how can I exploit this procedure?
Dec
6
comment SQL — using string concatenation, how can I exploit this procedure?
AFAIK, the % operator does not need to be in pairs. like '%abc' should work without any issue, and it does
Dec
6
asked SQL — using string concatenation, how can I exploit this procedure?
Nov
5
comment How do you log in from an unsecured computer?
@vsz actually, since banks usually have 3 or 4 factor authentication for an actual transaction, it should be relatively safe to do a login, since you can only see your bank balance,etc that way
Nov
5
comment How do you log in from an unsecured computer?
@DanNeely again, aren't bios level rootkits extremely rare? Like, virtually no large scale infections at all?
Nov
5
awarded  Nice Answer
Nov
5
comment How do you log in from an unsecured computer?
@asmeurer true, that issue remains, but the assumption is that the PC owner is not malicious, but simply does not keep his software secure
Nov
4
answered How do you log in from an unsecured computer?