meta user
network profile
| bio | website | ralstonrats.co.uk |
|---|---|---|
| location | Scotland, United Kingdom | |
| age | ||
| visits | member for | 2 years, 5 months |
| seen | 22 mins ago | |
| stats | profile views | 127 |
|
22m |
comment |
How to allow only some specific computer systems to access website? How do you implement Kerberos via HTTP? How does it authenticate the device rather than the user? |
|
23m |
answered | How to allow only some specific computer systems to access website? |
|
36m |
comment |
Is there a dictionary of visibly similar Unicode characters for English Spam processing? Once you've applied the mechanism described in the SO answer, surely anything else is most easily managed via Bayesian filering? |
|
May 15 |
comment |
How can I find the malicious/backdoor codes without knowing the last modified date? Identifying the changes made would help identify the backdoors added to the system - but it has no impact on the vulnerability the hacker exploited to deploy the additional code. |
|
May 11 |
comment |
Does prompting for security questions on new computers add any security on banking websites? @John: yes - not sure about legislation in US, but in Europe, Basel II requires 2-factor authentication for personal banking - but 2 passwords are considered as adequate (one password and a cookie from a previous authenticated session seems to meet the requirement more sensibly). There's all sorts of other things the banks might use but don't. |
|
May 8 |
answered | Generic defense againt SQL injection |
|
May 8 |
comment |
Generic defense againt SQL injection Paramaterized queries are not the same thing as prepared statements and neither are the only way to prevent SQL injection - sanitizing the input before splicing into an SQL statement also provides protection (and this is what client parsed parameterized queries do - just hiding away much of the nastiness). And even then it's just possible to inject SQL but only if dynamic SQL queries are constructed from the paramaters. |
|
Apr 29 |
comment |
Safe to reply to a suspicious email? Many, many years ago, I made the mistake of replying to an unsollicated message saying I was not interested and did not wish to receive further emails. The sender address was actually a distribution list used by the spammer and my email was relayed to several thousand victims. Oops. |
|
Apr 25 |
answered | Do Mobile Device Management solutions provide a mechanism for an internal website to know what kind of device is connecting? |
|
Apr 25 |
comment |
What are the valid characters which can be present in a session ID [can it have spaces] What kind of session id? Why is this not off-topic on a security forum? |
|
Apr 21 |
answered | How to Block a url not a website |
|
Apr 15 |
comment |
Vulnerable code suggested on OWASP? In addition to not solving the problem of session hijacking, this code is going to break your site for legitimate traffic - remote_addr can change mid session! (although it's rare for the IP address to cross network ranges) |
|
Apr 11 |
comment |
What bad coding practices makes a browser extension vulnerable? Most of these are arguably good javascript practice - you'll find lots of examples of them in tools such as YUI and jquery. |
|
Apr 9 |
answered | What are the parameters to be logged in a web application? |
|
Mar 22 |
comment |
How does DHE-RSA-AES256-SHA compare to RC4 as the Cipher for SSL? Ar you really only running a single cipher set on your server - or is that just the one which was negotiated with your browser? |
|
Mar 21 |
comment |
Is it possible to execute a php script in an image file? I'd have voted this answer up if mr.spuratic hadn't suggested that applying a regex to the filename/extension in anyway validates the content or mimetype (even with an end anchor). Yes that's a fairly obvious attack vector - it's not a valid defence strategy. (Potentially hostile) Uploaded content should be stored completely outside the doc root and in the case of files, preferably converted to a different format using lossless compression. How you handle meta-data is a complex question - this is where PHP malware resides - but it may also contain copyright info. |
|
Mar 18 |
answered | Device fingerprinting & Mass Computer Surveillance |
|
Mar 14 |
comment |
New Undetected Virus? You seem to be surprised that your anti-virus might be inneffective - while it's not clear if there is a virus or not, you might want to read these: imperva.com/docs/… carbonblack.com/… dsd.gov.au/infosec/top-mitigations/… |
|
Mar 12 |
comment |
Is $_SERVER[ ] a safe source of data in PHP? Your answer immediately indicates failure. It's relatively difficult to compromise PHP by hitting it with bad data (there are some historical vulnerabilities) but it makes no sense to modify the representation of the data after it has been parsed. You should ALWAYS change the representation of data before it leaves PHP - but how you change it depends on where it is going (htmlentities, urlencode, mysqli_real_escape_string....) or do you process all your data base64 encoded? (which BTW is not URL safe). YOU DONT SANITIZE INPUT - VALIDATING IT IS OK - YOU ALWAYS ESCAPE OUTPUT |
|
Mar 12 |
comment |
Single File Encryption in a Windows Environment agreed that these don't provide deniability of the existence of a filename - but '[in]secure' can mean different things in different contexts. It's not particularly relevant to the task of maintaining a list of account details. Regrading 'It is my understanding...' most such tools (axcrypt, PGP, GPG) automatically shred temporary and source files. |
