Reputation
3,051
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
2 14 23
Newest
 Yearling
Impact
~207k people reached

Sep
24
awarded  Yearling
Sep
21
awarded  Pundit
Jun
14
comment Did this ShellShock exploit work?
Careful here! Shellshock is not a vulnerability, it's a collection of vulnerabilities. You can be immune from one but not the next one. Also, many people consider that the fact () { foo } can define a function IS already a vulnerability, as the attacker doesn't need to control the variable name.
Jun
9
comment Are passwords in Mozilla products stored insecurely?
What did you expect?
Jun
4
reviewed Approve is it possible to detect zigbee traffice via wireshark? if yes , how?
May
25
revised GET and POST request vulnerable to CSRF attack?
added tags for clarity
May
25
comment GET and POST request vulnerable to CSRF attack?
Is the client a web browser?
May
8
awarded  Nice Answer
May
2
revised Distinguish between Wi-Fi Captive portal and MitM attack
added tags
May
2
answered Distinguish between Wi-Fi Captive portal and MitM attack
Feb
14
comment Can any CA sign any domain?
Not if the CA is "too big to fail".
Feb
13
revised Are CSRF tokens useful outside of web APIs?
added tags
Feb
13
answered Are CSRF tokens useful outside of web APIs?
Feb
13
comment Are CSRF tokens useful outside of web APIs?
What is a "Web API"?
Feb
11
answered Why can protocols on higher layers be left unchanged?
Feb
7
revised Should CSRF token without session cookie work?
added tag
Jan
23
awarded  Famous Question
Jan
20
comment Why is a child window allowed to change the location of its parent?
On which browser?
Jan
17
revised What does the SSID have to do with a networks security concerning rainbow tables?
added tags
Jan
16
comment What does the SSID have to do with a networks security concerning rainbow tables?
In the context of attacks against WPA/WPA2-Personal?