445 reputation
210
bio website
location
age
visits member for 3 years
seen Jul 27 at 15:00

Jul
25
comment Can sites which check your password as you type pose a security risk?
You can use fiddler to determine if its actually hitting the server with every keypress. And I assume it does pose a security risk since it makes bruteforce much easier (essentially xn instead of x^n attempts required)
Jul
25
asked Isnt the 3D secure system essentially completely ineffective in avoiding fraud?
May
6
answered What's the point of EMV when only the card is needed to shop online?
Mar
10
awarded  Commentator
Mar
10
accepted How is a “commonly used password” determined?
Mar
10
comment How is a “commonly used password” determined?
Using a static list does seem to have a major pitfall of not being updated frequently due to newly popular passwords ( xkcd.com/936 )
Mar
8
comment Why are there few (none?) easy to use encryption libraries?
Windows has DPAPI for thick clients
Mar
8
asked How is a “commonly used password” determined?
Nov
17
awarded  Yearling
Aug
14
comment Is it safe to show users why their password is not allowed?
Out of curiosity, why a "Too long" constraint? My limited understanding says that once you hash the password, it should be irrelevant
Jun
12
awarded  Citizen Patrol
Dec
6
accepted SQL — using string concatenation, how can I exploit this procedure?
Dec
6
comment SQL — using string concatenation, how can I exploit this procedure?
AFAIK, the % operator does not need to be in pairs. like '%abc' should work without any issue, and it does
Dec
6
asked SQL — using string concatenation, how can I exploit this procedure?
Nov
5
comment How do you log in from an unsecured computer?
@vsz actually, since banks usually have 3 or 4 factor authentication for an actual transaction, it should be relatively safe to do a login, since you can only see your bank balance,etc that way
Nov
5
comment How do you log in from an unsecured computer?
@DanNeely again, aren't bios level rootkits extremely rare? Like, virtually no large scale infections at all?
Nov
5
awarded  Nice Answer
Nov
5
comment How do you log in from an unsecured computer?
@asmeurer true, that issue remains, but the assumption is that the PC owner is not malicious, but simply does not keep his software secure
Nov
4
answered How do you log in from an unsecured computer?
Oct
5
awarded  Scholar