2,474 reputation
11221
bio website
location
age
visits member for 3 years
seen 11 hours ago

Aug
1
comment Can the USB standard be altered to prevent the “firmware attack”?
I have no idea what you would like to standardise. I bet firmware, firmware loaders, and chips are not standard. A USB standard's aim is interoperability, not security. It's about standard protocols. If people want to play and reprogram USB devices, it isn't the task of a standard to rule on that.
Aug
1
answered Can the USB standard be altered to prevent the “firmware attack”?
Aug
1
comment Can the USB standard be altered to prevent the “firmware attack”?
How devices can be reprogrammed, how new firmware is verified, and whether it is signed, are out of the scope of the standard.
Jul
23
reviewed Approve suggested edit on Get the browser history without using a browser
Jul
18
reviewed Approve suggested edit on How to easily remember lots of different passwords?
Jul
15
comment This protocol is vulnerable, but why?
It isn't clear what you are trying to do here!
Jul
14
comment Why is the same origin policy so important?
"origin of the script itself is not relevant to the same-origin policy" but it is: first, the script http://a.c/s.js is fetched with its HTTP origin http://a.c, with its a.c HTTP cookies; then run within the scope of the HTML document (http://b.c/doc.html) HTTP origin (http://b.c/).
Jul
13
comment Showing CAPTCHA
With IPv6, getting another, different IP address is as trivial as ipconfig. Be careful with address storage: don't expose yourself to a DDOS.
Jul
6
revised Website: Pre-Shared-Key Authentication
spelling, better wording
Jun
19
awarded  Nice Answer
Jun
17
revised How to recognize if someone using password Reminder Script
changed formatting: boldface instead of "program code" (which causes horizontal scrolling)
Jun
17
reviewed Approve suggested edit on Is there any way for my ISP or LAN admin to learn my gmail address as a result of me logging into gmail's web interface through via their network?
Jun
16
reviewed Approve suggested edit on How do exploits and payloads work together?
Jun
16
reviewed Approve suggested edit on Length of passwords that are rainbow table safe
Jun
16
reviewed Approve suggested edit on Github Pages Security, From .com to .io
Jun
16
reviewed Approve suggested edit on How to avoid cloaking attacks?
Jun
16
comment Is it illegal to publish an exploit against a known vulnerability in US?
@AbbasJavanJafari OSS (open source software) is not without copyright and copyright owners.
Jun
14
comment Is it illegal to publish an exploit against a known vulnerability in US?
Could you describe the applicable doctrine or law?
Jun
14
comment Is it illegal to publish an exploit against a known vulnerability in US?
@schroeder "It's a defined concept" But can you prove to a judge that you did a "responsible disclosure"? Can the other party disprove that?
Jun
13
comment Is it illegal to publish an exploit against a known vulnerability in US?
@schroeder Is "responsible disclosure" a well defined concept?