43,427 reputation
1294172
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 6 months
seen Apr 11 at 12:45

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
4
comment Self sign SSL certificate for my mobile app?
Keep in mind that a $10 SSL cert isn't likely to be for a particularly reputable CA, though.
Dec
4
answered Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
Dec
4
comment Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
Or just get r407 from trac.kismac-ng.org/wiki/Downloads
Dec
4
comment Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
What wireless card are you using?
Dec
4
revised How does automated query compromise other Google users?
s/affect/effect/
Dec
4
answered 3 or 4 characters long username from security point of view
Dec
4
answered How does automated query compromise other Google users?
Dec
4
revised How does automated query compromise other Google users?
cleaned up
Dec
4
comment Possible to execute a non-persistent XSS attack without using the url/query string?
Heh, that's smart. I wonder how many other sites have persistent XSS from file metadata...
Dec
4
comment How to Protect the Password Stored in a Configuration File?
Related: How can I avoid putting the database password in a perl script?
Dec
4
comment How do certification authorities store their private root keys?
Any downvoters care to actually explain their vote? Not much point in giving something a -1 if nobody knows why.
Dec
3
comment Is it possible to make an xss with only html tags
+1 for the OnError trick.
Dec
3
comment Is it possible to make an xss with only html tags
Ah, yes, they could just do that instead, too.
Dec
3
comment Is it possible to make an xss with only html tags
Yes, they can just use ' instead. Or they could exploit unicode parsing tricks to inject a " or ' character.
Dec
3
revised Is it possible to make an xss with only html tags
edited tags
Dec
3
answered Is it possible to make an xss with only html tags
Dec
3
reviewed Approve suggested edit on How can I prevent users from using bad passwords in my web application?
Dec
3
comment What security factors should I take into consideration when selecting a bank?
Sadly, banks are often a great example of doing the right thing wrong. They read up on these new-fangled protection methods, then foul up the implementation horribly.
Dec
3
comment How do certification authorities store their private root keys?
@lynks I think AJ is largely right here. If attribution is gained, it puts them in a nasty political situation. It's also cheaper and safer for them to just get one of their own domestic CAs to issue a fake certificate which their citizens' browsers will happily accept.
Dec
3
comment wireless security concern
WPS seems likely. I'd guess from there he pulled the router config out of UPnP - a lot of manufacturers are stupid enough to include the WiFi password in the XML response.