Reputation
1,113
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
5 13
Impact
~108k people reached

  • 0 posts edited
  • 0 helpful flags
  • 12 votes cast
1d
awarded  Popular Question
Jan
14
answered How to tell users that they shouldn't disclose their password over the phone to our help desk?
Jan
14
awarded  Notable Question
Jan
11
answered Is it safe to tell credit card number to bank employee over a phone?
Dec
3
answered For an end-user, is HTML5/JavaScript more secure than Flash?
Oct
26
answered Zilog Z80 CPU family security
Aug
29
comment Forgot password and revealing whether account exists
Yes, but imagine if you could discover that bill@clinton.com was registered at Ashley Madison. Nothing proven, but you still might make use of it.
Aug
29
answered Forgot password and revealing whether account exists
Aug
18
awarded  Yearling
Aug
9
answered Why do people use IP address bans when IP addresses often change?
Jul
23
answered Can malicious code trigger without the user executing or opening the file?
May
30
awarded  Popular Question
May
28
answered What mail applications use crypto?
May
27
answered Can attackers get anything with DoS attacks except crashing the service?
May
22
comment Prevent shell script inside image file
If you're looking for uploaded images to be displayed by web browsers, there are only a few formats that are acceptable. You probably have other constraints too, such as file size and image size. I would write a perl script to open the image and validate or reject it, but depending on your environment and expertise level, there may be something more suitable available to you.
May
22
comment Prevent shell script inside image file
any image reader that can be tricked into running a shell script is buggy.
May
22
comment Prevent shell script inside image file
Those are by definition buggy image readers, and should not be used. There was one famously widespread instance of such a buggy reader, but it ought to be long extinct. There are always new exploits discovered, but trusting you image reader is not unreasonable.
May
22
answered Prevent shell script inside image file
May
21
answered Can a browser JavaScript console ever be an issue?
May
7
comment Bring your own phone to a (new) job: Consequences?
Some employers require that you will allow them to wipe the phone if they feel the need. For me, that would be a deal killer.