55,678 reputation
17134229
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 7 months
seen 2 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
5
answered Any way to use Java (sun micro) without any concern of infection
Dec
5
comment Any way to use Java (sun micro) without any concern of infection
Are you sure you're not getting Java and JavaScript mixed up? ADVFN doesn't seem to use a Java applet at all.
Dec
4
comment Storing account credentials for spouse/loved one?
Of course. Any "cloud storage" service would work.
Dec
4
comment Storing account credentials for spouse/loved one?
If it's a shared account, you should both have legal access anyway. But Callum is right; for personal accounts you must get power of attorney. However, I disagree with not getting the password. If you've got power of attorney, you're legally allowed to access it. Having the password just makes it easier.
Dec
4
comment Storing account credentials for spouse/loved one?
Yes, I forgot to mention that. The Android app is very good. In fact, I don't think I know of any other app that works as well as its desktop counterpart.
Dec
4
answered Storing account credentials for spouse/loved one?
Dec
4
comment Self sign SSL certificate for my mobile app?
Wasn't aware that Comodo was selling certs for $10 these days. I was considering discount CAs like CACert and InstantSSL. And you're right in saying the cert itself gives no extra security; I was referring to the security of the CA itself.
Dec
4
comment Self sign SSL certificate for my mobile app?
Precisely. A lot of less-reputable CAs don't make it into some devices, whereas the big CAs (e.g. Verisign / Globalsign) are highly likely to be in all of them. Plus you'd figure that the big authorities are the ones to be throwing lots of money at HSMs and other expensive security measures.
Dec
4
comment Self sign SSL certificate for my mobile app?
Keep in mind that a $10 SSL cert isn't likely to be for a particularly reputable CA, though.
Dec
4
answered Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
Dec
4
comment Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
Or just get r407 from trac.kismac-ng.org/wiki/Downloads
Dec
4
comment Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2
What wireless card are you using?
Dec
4
revised How does automated query compromise other Google users?
s/affect/effect/
Dec
4
answered 3 or 4 characters long username from security point of view
Dec
4
answered How does automated query compromise other Google users?
Dec
4
revised How does automated query compromise other Google users?
cleaned up
Dec
4
comment Possible to execute a non-persistent XSS attack without using the url/query string?
Heh, that's smart. I wonder how many other sites have persistent XSS from file metadata...
Dec
4
comment How to Protect the Password Stored in a Configuration File?
Related: How can I avoid putting the database password in a perl script?
Dec
4
comment How do certification authorities store their private root keys?
Any downvoters care to actually explain their vote? Not much point in giving something a -1 if nobody knows why.
Dec
3
comment Is it possible to make an xss with only html tags
+1 for the OnError trick.