1,438 reputation
1625
bio website
location
age
visits member for 3 years, 2 months
seen Nov 12 at 1:40

Previous .NET developer turned Business Analyst.

enter image description here

enter image description here


Sep
30
awarded  Yearling
Sep
11
awarded  Popular Question
Jul
2
awarded  Curious
May
13
awarded  Popular Question
Mar
7
answered File upload vulnerability
Feb
7
awarded  Popular Question
Jan
1
awarded  Notable Question
Oct
1
accepted How do vulnerability scanners detect when DEBUG is set to True on ASP.NET applications
Oct
1
comment How do vulnerability scanners detect when DEBUG is set to True on ASP.NET applications
Thank you. That is quite helpful!
Oct
1
asked How do vulnerability scanners detect when DEBUG is set to True on ASP.NET applications
Sep
30
awarded  Yearling
Sep
5
comment Course project that teaches secure design
I think I could.. I need to get offline for a bit but if nobody answers anything better, I'll give it a shot as a true answer. I've been teaching new hires secure design at work recently, which is probably similar. I'll type up a rough outline of what is taught and what I look for when evaluating them.
Sep
5
comment Course project that teaches secure design
I'm not sure I know exactly what you're looking for but it seems these would fit the bill: (But not confident enough to post as an answer.) Designing a shopping cart website,Designing an HR customer portal where employees can view paychecks, change dependents, set up direct deposit... Anything where you're dealing with sensitive data that makes an attractive target would do. Have them draft threat models, architecture designs showing weak points, etc.
Jun
21
accepted Is there a risk in sending the username in a password reset email?
Jun
20
comment Is there a risk in sending the username in a password reset email?
@MikeSamuel - no. And for the record, this particular sit isn't live or even exposed to the public yet. By the time it is, the password reset url would have long since been expired, but Adnan was right. That was foolish.
Jun
20
comment Is there a risk in sending the username in a password reset email?
@Adnan - Thank you. I'll bear that in mind inthe future.
Jun
20
revised Is there a risk in sending the username in a password reset email?
deleted 109 characters in body
Jun
20
asked Is there a risk in sending the username in a password reset email?
Jun
3
comment Why store the password salt instead of generating it?
Nice explanation!
Apr
30
awarded  Fanatic