Reputation
2,083
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
4 25 54
Impact
~181k people reached

Apr
4
revised What actions should be taken by site according to Data Protection legislations?
added 175 characters in body; deleted 1 characters in body
Apr
4
asked What actions should be taken by site according to Data Protection legislations?
Mar
24
accepted Why should crossdomain.xml be present if user-uploaded files exist?
Mar
21
revised Does X-Content-Type-Options really prevent content sniffing attacks?
deleted 5 characters in body; edited title
Mar
21
revised What attacks use enabled Apache's PATH_INFO?
fixing typos
Mar
21
revised Why should crossdomain.xml be present if user-uploaded files exist?
small edits
Mar
20
revised What attacks use enabled Apache's PATH_INFO?
edited tags; edited title
Mar
20
comment Does X-Content-Type-Options really prevent content sniffing attacks?
Why should untrusted files be hosted on separate IP address? I haven't heard about such attacks previously. Could you supply some resources to read about it?
Mar
20
asked What attacks use enabled Apache's PATH_INFO?
Mar
20
revised Does X-Content-Type-Options really prevent content sniffing attacks?
deleted 1 characters in body; edited title
Mar
20
asked Does X-Content-Type-Options really prevent content sniffing attacks?
Mar
20
asked Why should crossdomain.xml be present if user-uploaded files exist?
Mar
19
accepted Is it trivial to bypass IP blocking?
Mar
18
asked Is it trivial to bypass IP blocking?
Mar
16
comment For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
How can Flash files appear in origin of your domain if user doesn't have an option to upload files to it's origin?
Mar
16
awarded  Commentator
Mar
16
comment How hard is it to intercept SMS (two-factor authentication)?
See wikipedia article. Attack can be completed in a few seconds. Please, edit your answer if it's true
Mar
16
awarded  Excavator
Mar
16
revised Strict Transport Security — max_age value
Update to version 6 of draft
Mar
15
suggested approved edit on Strict Transport Security — max_age value