243 reputation
317
bio website michaelsanford.com
location
age
visits member for 3 years, 9 months
seen Sep 3 at 2:43

Aug
29
answered How safe is it to install XAMPP on my home computer to test PHP code?
Aug
28
comment Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?
Social engineering defeats a lot of security. Not to be ignored, especially in this context, is the sheer appeal of the app: I've been shocked at how many apps in the Android market want my "Location: fine (GPS)" that have no business requesting it. I have the feeling that 99% of those who encounter that permission-request warning just install it anyway because they want to use the app.
Aug
28
answered Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?
Aug
27
awarded  Commentator
Aug
27
comment What is a cryptographic puzzle?
See Bitcoin confirmations for another interesting implementation: en.wikipedia.org/wiki/Bitcoin#Confirmations @bjarkef
Aug
20
awarded  Constituent
Aug
20
awarded  Caucus
Aug
20
awarded  Teacher
Aug
1
awarded  Scholar
Aug
1
accepted Why do attackers bother (trivially) obfuscating their source code?
Aug
1
comment Why do attackers bother (trivially) obfuscating their source code?
Ah, so I was on the right track! Thanks, Polynomial.
Aug
1
awarded  Student
Aug
1
asked Why do attackers bother (trivially) obfuscating their source code?
Jul
25
answered password complexity policy for non “English” passwords
Jul
25
comment password complexity policy for non “English” passwords
@george_h The passwords are really in English, and not just latinized Arabic words?
Jul
25
comment Should IP addresses be validated to prevent SQL Injection?
+1 Good answer.
Jul
25
answered Clarification on an email about a security breach
Jul
25
comment Should IP addresses be validated to prevent SQL Injection?
Only variables prefixed with HTTP_ are pulled from the HTTP header (hence the prefix): stackoverflow.com/questions/6474783/…
Jul
25
revised How to detect cookie stuffing attacks?
Added detection tag.
Jul
25
suggested suggested edit on How to detect cookie stuffing attacks?