814 reputation
29
bio website boardspace.net
location
age
visits member for 2 years, 11 months
seen 20 hours ago

I develop games for fun.


Aug
14
comment Cheating or service disruption by altering client-side code
Not forms, discreet commands in a continuous TCP steam
Aug
14
comment Cheating or service disruption by altering client-side code
"Command Injection" is adding his own items to the communications stream from client to server.
Aug
13
awarded  Promoter
Aug
11
comment Top 10 dangerous mistakes in C programming?
My list andromeda.com/people/ddyer/topten.html
Aug
10
comment Cheating or service disruption by altering client-side code
the "so what" is, as an alternative to finding a different line of work, to make cheating more trouble than it is worth.
Aug
10
comment Cheating or service disruption by altering client-side code
We're not on the same page. If the client is a game, and the client could use the exploit to cheat, for example.
Aug
10
comment Cheating or service disruption by altering client-side code
I think I adequately indicated awareness of all that in the original post. I'm interested in detecting such exploits and making them harder to do and less likely to be successful and/or undetected.
Aug
10
asked Cheating or service disruption by altering client-side code
Jul
28
accepted Odd “duplicate” HTTP requests
Jul
28
comment Odd “duplicate” HTTP requests
I think you're correct, but think about how silly this is. Malware can use POSTS too, so if malware could escape scrutiny so easily, their detection strategy would be seriously flawed.
Jul
27
revised Odd “duplicate” HTTP requests
added 88 characters in body
Jul
27
comment Odd “duplicate” HTTP requests
A replay attack is what the server thought it was detecting, but the context makes it unlikely that was actually the intent.
Jul
27
revised Odd “duplicate” HTTP requests
added 178 characters in body
Jul
26
asked Odd “duplicate” HTTP requests
Jul
10
comment Is it OK to tell your password to your company's sysadmin?
This is about a service account and incoming email. There's no separate encryption (or if there were, the user password would be irrelevant.) As root in unix, I can change your password and log in as you. How's that for a back door?
Jul
10
answered Is it OK to tell your password to your company's sysadmin?
Jul
6
answered Suspicious entries in MySQL database from user input forms - sql injection?
Jun
27
answered What are the purposes of these security policies?
Jun
27
answered Does a commercially available self destructing HDD (set in BIOS) exist?
Jun
13
comment Somebody bumped into me, next day my storage unit was burglarized
This post seems incredible to me - the alleged thief had very specific information that could only have come from the poster - such as the location and interesting contents of his storage unit - and also technical savvy to capture and clone his card data. But at the same time was caught trying to pawn what he stole?