253 reputation
318
bio website michaelsanford.com
location
age
visits member for 3 years, 11 months
seen yesterday

Aug
29
awarded  Critic
Aug
29
answered How safe is it to install XAMPP on my home computer to test PHP code?
Aug
28
comment Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?
Social engineering defeats a lot of security. Not to be ignored, especially in this context, is the sheer appeal of the app: I've been shocked at how many apps in the Android market want my "Location: fine (GPS)" that have no business requesting it. I have the feeling that 99% of those who encounter that permission-request warning just install it anyway because they want to use the app.
Aug
28
answered Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?
Aug
27
awarded  Commentator
Aug
27
comment What is a cryptographic puzzle?
See Bitcoin confirmations for another interesting implementation: en.wikipedia.org/wiki/Bitcoin#Confirmations @bjarkef
Aug
20
awarded  Constituent
Aug
20
awarded  Caucus
Aug
20
awarded  Teacher
Aug
1
awarded  Scholar
Aug
1
accepted Why do attackers bother (trivially) obfuscating their source code?
Aug
1
comment Why do attackers bother (trivially) obfuscating their source code?
Ah, so I was on the right track! Thanks, Polynomial.
Aug
1
awarded  Student
Aug
1
asked Why do attackers bother (trivially) obfuscating their source code?
Jul
25
answered password complexity policy for non “English” passwords
Jul
25
comment password complexity policy for non “English” passwords
@george_h The passwords are really in English, and not just latinized Arabic words?
Jul
25
comment Should IP addresses be validated to prevent SQL Injection?
+1 Good answer.
Jul
25
answered Clarification on an email about a security breach
Jul
25
comment Should IP addresses be validated to prevent SQL Injection?
Only variables prefixed with HTTP_ are pulled from the HTTP header (hence the prefix): stackoverflow.com/questions/6474783/…
Jul
25
revised How to detect cookie stuffing attacks?
Added detection tag.