Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
8
Newest
 Excavator
Impact
~2k people reached

Aug
3
comment Any comments or advice on OWASP-2013 top 10 number A9
@tylerl Every three years, but your point is valid.
Feb
21
comment Why are salted hashes more secure for password storage?
Best, clearest, most complete explanation of hashes I've seen. I plan to shamelessly use it in classes I teach on security.
Feb
16
comment Can a CSRF CAPTCHA be defeated?
Thanks, @Bernie. I know many CAPTCHAs can be beat, but can it be beat during a CSRF attack and if so, how?
Feb
16
comment Can a CSRF CAPTCHA be defeated?
+1 for the answer and bonus Synchronizer token info. Nice. Unfortunately, Synchnronizer token is more beatable than a CAPTCHA. All the attacker has to do is automate all the steps along the way using JavaScript.