1,517 reputation
31940
bio website
location Minsk, Belarus
age 23
visits member for 3 years
seen Sep 30 at 19:37

Feb
24
comment Is it safe to serve any user uploaded file under only white-listed MIME content types?
Files are put to separate domain so site is not vulnerable to XSS in such way. Do you think that file sharing service should scan file for viruses/malware, keeping a list of allowed content-types, extensions?
Feb
23
comment Is it safe to serve any user uploaded file under only white-listed MIME content types?
Do you think that having whitelist of allowed extensions / content-types is necessary at file sharing service? I think owner of such site shouldn't make any checks for viruses or other stuff as the main aim of such site is to give the highest availability. Am I right?
Feb
22
awarded  Benefactor
Feb
21
revised Is “untrusted code” reported by DOM Snitch a vulnerability?
added 130 characters in body
Feb
21
accepted What is the most reliable way to transfer emails without specific recipient support?
Feb
19
accepted Is “untrusted code” reported by DOM Snitch a vulnerability?
Feb
16
comment Is “untrusted code” reported by DOM Snitch a vulnerability?
Actually, this extension is DOM Snitch yourself. Does it mean that DOM Snitch generates vulnerability that tells only that it parses page. Why DOM Snitch generates this vulnerability?
Feb
16
awarded  Promoter
Feb
14
awarded  Critic
Feb
14
asked Is “untrusted code” reported by DOM Snitch a vulnerability?
Feb
7
accepted Should I prevent user from operating with site during some first seconds?
Feb
7
comment Which SSL/TLS ciphers can be considered secure?
Why haven't you said about CBC ciphers and BEAST?
Feb
6
accepted Should user be allowed to save password in browser?
Feb
4
revised Should I prevent user from operating with site during some first seconds?
attacker.com and victim.com are a standard way of naming such addresses
Feb
3
revised What is the most reliable way to transfer emails without specific recipient support?
added 132 characters in body
Feb
3
asked What is the most reliable way to transfer emails without specific recipient support?
Feb
3
awarded  Citizen Patrol
Feb
2
asked Should user be allowed to save password in browser?
Dec
22
revised Should I prevent user from operating with site during some first seconds?
added 106 characters in body; edited title
Dec
22
accepted Should user input be validated for it's length?