Reputation
2,521
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
9 16
Newest
 Yearling
Impact
~120k people reached

Feb
29
comment how to make software reverse engineering difficult
@NeilSmithline You are correct. Updated to write what I meant.
Feb
29
revised how to make software reverse engineering difficult
updates to correct statement regarding code signing.
Sep
15
awarded  Yearling
Aug
12
comment Are there technical differences which make Linux less vulnerable to virus than Windows?
@Michael The Windows Store App model is one example at baking in Sandboxed applications into Windows.
Jul
10
awarded  Nice Answer
Jun
1
awarded  Good Answer
May
30
reviewed Approve How can a website find my real IP address while I'm behind a proxy?
May
26
awarded  Taxonomist
Apr
22
awarded  Good Answer
Apr
22
revised What ways are there to verify a self-written protocol?
edited tags
Apr
22
revised What ways are there to verify a self-written protocol?
deleted 1 character in body
Apr
22
revised How do you know your server has been compromised?
added 227 characters in body
Apr
21
answered What ways are there to verify a self-written protocol?
Feb
22
comment “Extended Protection” primer and implementation guide to prevent MITM
@LarryK Good point, added that one in.
Feb
22
revised “Extended Protection” primer and implementation guide to prevent MITM
Addition about browser support
Oct
15
revised Securing user supplied files in IIS
Improved readability of the question based on comments.
Oct
15
comment Securing user supplied files in IIS
Can you clarify if you mean: 1. that your website accepts files from the "general public" but they should be able to see them after they have been uploaded. 2. Your website is published on the Internet but you only want authenticated users to access the website.
Oct
15
comment How secure is HMAC
JWT relies on a key to sign or encrypt the token, so an attacker could create the JSON but without the correct key the attack should fail. You need to ensure that your API only accepts valid tokens. And preferably use a more secure hash algorithm like SHA256.
Oct
15
awarded  Custodian
Oct
15
reviewed Approve How secure is HMAC