Reputation
2,880
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
2 12 23
Newest
 Nice Answer
Impact
~179k people reached

Jun
14
comment Did this ShellShock exploit work?
Careful here! Shellshock is not a vulnerability, it's a collection of vulnerabilities. You can be immune from one but not the next one. Also, many people consider that the fact () { foo } can define a function IS already a vulnerability, as the attacker doesn't need to control the variable name.
Jun
9
comment Are passwords in Mozilla products stored insecurely?
What did you expect?
Jun
4
reviewed Approve is it possible to detect zigbee traffice via wireshark? if yes , how?
May
25
comment GET and POST request vulnerable to CSRF attack?
@NgocHuynh I have added tags for clarity
May
25
revised GET and POST request vulnerable to CSRF attack?
added tags for clarity
May
25
comment GET and POST request vulnerable to CSRF attack?
Is the client a web browser?
May
8
awarded  Nice Answer
May
2
revised Distinguish between Wi-Fi Captive portal and MitM attack
added tags
May
2
answered Distinguish between Wi-Fi Captive portal and MitM attack
Feb
14
comment Can any CA sign any domain?
Not if the CA is "too big to fail".
Feb
13
revised Are CSRF tokens useful outside of web APIs?
added tags
Feb
13
answered Are CSRF tokens useful outside of web APIs?
Feb
13
comment Are CSRF tokens useful outside of web APIs?
What is a "Web API"?
Feb
11
answered Why can protocols on higher layers be left unchanged?
Feb
7
revised Should CSRF token without session cookie work?
added tag
Jan
23
awarded  Famous Question
Jan
20
comment Why is a child window allowed to change the location of its parent?
On which browser?
Jan
17
revised What does the SSID have to do with a networks security concerning rainbow tables?
added tags
Jan
16
comment What does the SSID have to do with a networks security concerning rainbow tables?
In the context of attacks against WPA/WPA2-Personal?
Jan
16
comment Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?
@user54791 WPA2-Enterprise does not imply "different username/password to each customer".