Reputation
617
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 10
Impact
~11k people reached

Jan
11
awarded  Popular Question
Nov
6
awarded  Yearling
Oct
12
comment Can HSTS be disabled in Firefox?
@CBHacking "without a proxy" is no requirement of mine; it was just a way to avoid getting answers that say "you could do this in your proxy". I was simply interested as to whether anyone knew if it could be switched off in the browser.
Oct
9
awarded  Student
Oct
9
revised Can HSTS be disabled in Firefox?
added 24 characters in body
Oct
9
asked Can HSTS be disabled in Firefox?
Jul
21
awarded  Caucus
Sep
22
awarded  Yearling
May
3
awarded  Citizen Patrol
Jan
4
revised What is SQL injection?
deleted 1 characters in body
Jan
2
awarded  Good Answer
Sep
22
awarded  Yearling
Jun
27
comment Am I a Hosting service provider in a sense of PCI-DSS SAQ D Appendix A?
You may be best off asking a registered QSA pcisecuritystandards.org/approved_companies_providers/…
Jun
27
comment Am I a Hosting service provider in a sense of PCI-DSS SAQ D Appendix A?
Where does credit card data fit into this service? Is your service a payment platform?
Jun
22
comment Looking for information about CVE-2006-6876 vulnerability
very old reference, but seminal and relevant insecure.org/stf/smashstack.html
Jun
22
comment Looking for information about CVE-2006-6876 vulnerability
Memory corruption. The overlong user-data will overwrite existingly used memory, corrupting the values stored there. With an invalid state, the program cannot continue to execute as normal, resulting in undefined behaviour.
Jun
22
comment Looking for information about CVE-2006-6876 vulnerability
It is most likely to be exploitable by hand-crafting a malicous SMS binary with an overlong field (read into the pdu argument) and placing that SMS in the queue to be processed by the server. The overlong data will be written into memory that may already be in use by something else. The server can be crashed (or perhaps worse) if a user sends a text message like this.
Jun
19
comment Why doesn't the same origin policy block get requests that contain arguments?
+1 for a very key point: "there is nothing special about the query string"
May
24
comment How do I get started with security? (beginner)
19 deadly sins [2005] (the first link) has been updated to 24 deadly sins [2009] amazon.co.uk/Deadly-Sins-Software-Security-Programming/dp/…
May
15
answered Is scanning a site directory considered illegal penetration testing?