2,393 reputation
11019
bio website
location
age
visits member for 2 years, 11 months
seen 20 hours ago

Jun
17
revised How to recognize if someone using password Reminder Script
changed formatting: boldface instead of "program code" (which causes horizontal scrolling)
Jun
17
reviewed Approve suggested edit on Is there any way for my ISP or LAN admin to learn my gmail address as a result of me logging into gmail's web interface through via their network?
Jun
16
reviewed Approve suggested edit on How do exploits and payloads work together?
Jun
16
reviewed Approve suggested edit on Length of passwords that are rainbow table safe
Jun
16
reviewed Approve suggested edit on Github Pages Security, From .com to .io
Jun
16
reviewed Approve suggested edit on How to avoid cloaking attacks?
Jun
16
comment Is it illegal to publish an exploit against a known vulnerability in US?
@AbbasJavanJafari OSS (open source software) is not without copyright and copyright owners.
Jun
14
comment Is it illegal to publish an exploit against a known vulnerability in US?
Could you describe the applicable doctrine or law?
Jun
14
comment Is it illegal to publish an exploit against a known vulnerability in US?
@schroeder "It's a defined concept" But can you prove to a judge that you did a "responsible disclosure"? Can the other party disprove that?
Jun
13
comment Is it illegal to publish an exploit against a known vulnerability in US?
@schroeder Is "responsible disclosure" a well defined concept?
Jun
13
revised Is it illegal to publish an exploit against a known vulnerability in US?
retag; remove thanks
Jun
12
answered Can I save & store a user's data in a way that proves that the information has not been altered, and that the timestamp is accurate?
Jun
9
answered How are public key certificates updated securely?
Jun
7
reviewed Approve suggested edit on Using GPG or PGP for symmetric database encryption/decryption in c#
Jun
3
reviewed Approve suggested edit on How can I separate two OS's files with encryption without using TrueCrypt?
Jun
3
reviewed Approve suggested edit on Cascaded Sudo for privilege elevation
Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
@makerofthings7 "Google leaks search terms to the target site" not anymore
Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
Re: referer You can search for "referer.rustybrick.com" in a search engine and click on the link to see how much info is sent. For Google and DDG, I see only the website (https://google.com/, https://duckduckgo.com/). For Bing, I see lots of stuff. (I use Google Chrome.) Note that this would work with a HTTP website, because referer is usually not sent in this case.
Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
I dislike the change-HREF-when-clicked but I disagree about Google trying to hide the fact that selected linked are logged: I have a Google account, and under Search history I can see 1) the searches I have made, 2) the websites I have visited by clicking on Google search results. (I wished Google used the PING feature to collect this data, and not mess with URLs, and I wish browser would show PING requests in some way.) You have to remember that when you have JS on, everything you type or click on a website can be logged by the website, including form data when you do not "submit".
Jun
2
reviewed Approve suggested edit on How can I generate custom brute-force dictionaries?