Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
6
Impact
~1k people reached

  • 0 posts edited
  • 1 helpful flag
  • 16 votes cast
Aug
3
comment Any comments or advice on OWASP-2013 top 10 number A9
@tylerl Every three years, but your point is valid.
Nov
24
awarded  Popular Question
Feb
21
comment Why are salted hashes more secure?
Best, clearest, most complete explanation of hashes I've seen. I plan to shamelessly use it in classes I teach on security.
Feb
18
awarded  Citizen Patrol
Feb
18
awarded  Scholar
Feb
18
accepted Can a CSRF CAPTCHA be defeated?
Feb
16
comment Can a CSRF CAPTCHA be defeated?
Thanks, @Bernie. I know many CAPTCHAs can be beat, but can it be beat during a CSRF attack and if so, how?
Feb
16
comment Can a CSRF CAPTCHA be defeated?
+1 for the answer and bonus Synchronizer token info. Nice. Unfortunately, Synchnronizer token is more beatable than a CAPTCHA. All the attacker has to do is automate all the steps along the way using JavaScript.
Feb
15
awarded  Student
Feb
15
asked Can a CSRF CAPTCHA be defeated?
Oct
4
awarded  Supporter
Oct
4
awarded  Autobiographer