meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 8 months |
| seen | 39 mins ago | |
| stats | profile views | 301 |
|
Aug 30 |
comment |
What kind of wifi network does not have any protection and yet it's not an open network? @clearojne You don't guess, you capture a valid MAC number over the air, and use it. |
|
Aug 30 |
comment |
What kind of wifi network does not have any protection and yet it's not an open network? "When I try to connect, I cannot." "it does not work" is not a proper way to describe a computer issue. What have you tried exactly, and what do you observe exactly. |
|
Aug 30 |
revised |
What kind of wifi network does not have any protection and yet it's not an open network? edited tags |
|
Aug 30 |
comment |
Is not checking the src url a vulnerability? "making sure to sanitize" "sanitize" how? |
|
Aug 30 |
revised |
How does Google not care about “spaces” in Application-specific passwords? edited tags |
|
Aug 30 |
revised |
How strong are google's Application-specific passwords? edited tags |
|
Aug 30 |
comment |
How strong are google's Application-specific passwords? "Can this be done?" Can what be done? |
|
Aug 29 |
comment |
https security - should password be hashed server-side or client-side? @rmorero "by this same logic would you also recommend running everything in a system on standard ports?" Not obscuring things does not mean that you should use standard ports. Using non-standard ports is not just obscurity. |
|
Aug 29 |
revised |
https security - should password be hashed server-side or client-side? edited tags |
|
Aug 29 |
revised |
What is the danger of Reflected Cross Site Scripting? edited tags |
|
Aug 28 |
comment |
Encrypt WiFi connection per connected user "Furthermore, the WPS extension makes it trivial to break into WPA/WPA2 networks." The WPS designers may believe that because some secure systems are hard to use, an easy to use system must be very insecure. Quite a lot of people say that security is inversely proportional to ease of use, ignoring all counter-example of this relation. |
|
Aug 28 |
comment |
Encrypt WiFi connection per connected user "the underlying security protocols (WPA / WPA2) are flawed" Can you give a reference? |
|
Aug 28 |
comment |
Encrypt WiFi connection per connected user "WiFi access point usually cannot use several encryption keys simultaneously." Actually each Wifi station has its own keys, and there is a broadcast key shared by all stations. |
|
Aug 28 |
comment |
Why can I read the response to this CSRF attack? "the browser (Chrome) to not read the response" Why? What would you ignore the response of a request you made? What security property would you expect from that? |
|
Aug 28 |
comment |
Why can I read the response to this CSRF attack? @Luc "It sounds like you just rediscovered CSRF, but you know the term so..." Not only. He knows the term "same origin policy", but does not know what it means. |
|
Aug 28 |
revised |
Why can I read the response to this CSRF attack? edited tags |
|
Aug 27 |
comment |
Definitely safest password storage scheme? "bar further logins after too many failed tries" which allows a trivial DOS against anyone knowing only the username! You have to weigh the DOS risk against the online password brute-force risk. |
|
Aug 27 |
revised |
What governing body is responsible for the use of GSM SMS alphanumeric SenderID's? edited tags |
|
Aug 27 |
revised |
Repost: Wappalyzer selling datasets - possible website security implications? edited tags |
|
Aug 27 |
revised |
Encrypt WiFi connection per connected user edited tags |
