806 reputation
29
bio website boardspace.net
location
age
visits member for 2 years, 8 months
seen 3 hours ago

I develop games for fun.


2d
answered Secure Custom Registration Links
2d
answered Decrypting Engima messages
2d
answered Can malware cause firefox to send GET requests?
Mar
27
answered Why should I care if a site uses encryption or not if I'm not exchanging any sensitive data?
Feb
18
answered How secure are virtual machines really? False sense of security?
Feb
10
comment How can this input-sanitizer function be defeated?
It seems to me that any aproach to sanitizing SQL commands that is based on searching for particular strings, without fully parsing the commands, cannot possibly work. At the very least, every time one of the blacklisted terms occurs innocently in a text field you will get a false positive.
Jan
28
answered Is it ever safe to skip server-side validations?
Jan
12
answered Secure alternative to e-mail
Jan
9
comment Someone faxed me a bunch of black paper
Two possibilities (1) just deserts - your company pollutes my phone, I pollute your faxes. (2) your attacker is a telemarketer hoping to sell toner cartridge refills.
Jan
9
comment Someone faxed me a bunch of black paper
Given ubiquitous caller id spoofing, the number printed across the top, if any, is legally meaningless. Ask the NSA who called you.
Dec
17
answered Protecting sensitive content in JS source code and Ajax cals
Oct
31
answered Is there a hash algorithm that can identify similar files or strings?
Oct
21
answered How can these spam emails be accessing email accounts on respected domains?
Oct
21
comment Why are security-crucial software written in unsafe languages?
@everyone I agree completely that C/C++ is less safe than almost any alternative, but the question was cast as safe verses unsafe. Nothing is safe.
Oct
21
answered SQL injection with “INSERT” statement
Oct
19
comment Why are security-crucial software written in unsafe languages?
There are no safe languages. C/C++ may be less safe, but it's only a relative difference, not a qualitative one. Software vulnerabilities come from bad design and flawed implementation of good designs, and no language removes that.
Oct
9
answered How is printf() in C/C++ a Buffer overflow vulnerability?
Oct
2
comment How does the Mega-D BotNet send spam?
I do not mean a relay server - they are essentially extinct as you say. I mean renting a server and using it to pump out spam directly.
Oct
2
answered How does the Mega-D BotNet send spam?
Sep
26
answered How can a network observer identify computers running old versions of Java?