2,304 reputation
11019
bio website
location
age
visits member for 2 years, 10 months
seen yesterday

Jun
7
reviewed Approve suggested edit on Using GPG or PGP for symmetric database encryption/decryption in c#
Jun
3
reviewed Approve suggested edit on How can I separate two OS's files with encryption without using TrueCrypt?
Jun
3
reviewed Approve suggested edit on Cascaded Sudo for privilege elevation
Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
@makerofthings7 "Google leaks search terms to the target site" not anymore
Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
Re: referer You can search for "referer.rustybrick.com" in a search engine and click on the link to see how much info is sent. For Google and DDG, I see only the website (https://google.com/, https://duckduckgo.com/). For Bing, I see lots of stuff. (I use Google Chrome.) Note that this would work with a HTTP website, because referer is usually not sent in this case.
Jun
2
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
I dislike the change-HREF-when-clicked but I disagree about Google trying to hide the fact that selected linked are logged: I have a Google account, and under Search history I can see 1) the searches I have made, 2) the websites I have visited by clicking on Google search results. (I wished Google used the PING feature to collect this data, and not mess with URLs, and I wish browser would show PING requests in some way.) You have to remember that when you have JS on, everything you type or click on a website can be logged by the website, including form data when you do not "submit".
Jun
2
reviewed Approve suggested edit on How can I generate custom brute-force dictionaries?
May
26
reviewed Approve suggested edit on What is blind injection and how to simulate the issue?
May
26
reviewed Approve suggested edit on What is blind injection and how to simulate the issue?
May
25
awarded  Enlightened
May
25
awarded  Nice Answer
Apr
24
reviewed Reject suggested edit on Load balancer and two machines - how many SSL certificates do I need?
Apr
17
reviewed Approve suggested edit on What makes it illegal to use the information learned by exploiting a bug?
Apr
15
reviewed Approve suggested edit on Are there “secure” languages?
Mar
22
awarded  Necromancer
Mar
11
awarded  Excavator
Mar
11
revised Does “late launch”/“dynamic chain of trust” allow remote attestation?
spelling
Mar
9
reviewed Approve suggested edit on Is Adblock (Plus) a security risk?
Mar
7
comment Should websites be allowed to disable autocomplete on forms or fields?
1. Some computers get stolen on a daisy. These should have adequate passphrase protection. 2. A CEO is not a system admin and breaking into his account should not have any notable security impact for the information system.
Mar
2
comment Is Adblock (Plus) a security risk?
How many people use Adblock* with EasyList and no other filters?