1,757 reputation
42346
bio website
location Minsk, Belarus
age 24
visits member for 3 years, 8 months
seen May 26 at 18:45

Mar
20
revised Does X-Content-Type-Options really prevent content sniffing attacks?
deleted 1 characters in body; edited title
Mar
20
asked Does X-Content-Type-Options really prevent content sniffing attacks?
Mar
20
asked Why should crossdomain.xml be present if user-uploaded files exist?
Mar
19
accepted Is it trivial to bypass IP blocking?
Mar
18
asked Is it trivial to bypass IP blocking?
Mar
16
comment For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
How can Flash files appear in origin of your domain if user doesn't have an option to upload files to it's origin?
Mar
16
awarded  Commentator
Mar
16
comment How hard is it to intercept SMS (two-factor authentication)?
See wikipedia article. Attack can be completed in a few seconds. Please, edit your answer if it's true
Mar
16
awarded  Excavator
Mar
16
revised Strict Transport Security — max_age value
Update to version 6 of draft
Mar
15
suggested approved edit on Strict Transport Security — max_age value
Feb
24
comment Is it safe to serve any user uploaded file under only white-listed MIME content types?
Files are put to separate domain so site is not vulnerable to XSS in such way. Do you think that file sharing service should scan file for viruses/malware, keeping a list of allowed content-types, extensions?
Feb
23
comment Is it safe to serve any user uploaded file under only white-listed MIME content types?
Do you think that having whitelist of allowed extensions / content-types is necessary at file sharing service? I think owner of such site shouldn't make any checks for viruses or other stuff as the main aim of such site is to give the highest availability. Am I right?
Feb
22
awarded  Benefactor
Feb
21
revised Is “untrusted code” reported by DOM Snitch a vulnerability?
added 130 characters in body
Feb
21
accepted What is the most reliable way to transfer emails without specific recipient support?
Feb
19
accepted Is “untrusted code” reported by DOM Snitch a vulnerability?
Feb
16
comment Is “untrusted code” reported by DOM Snitch a vulnerability?
Actually, this extension is DOM Snitch yourself. Does it mean that DOM Snitch generates vulnerability that tells only that it parses page. Why DOM Snitch generates this vulnerability?
Feb
16
awarded  Promoter
Feb
14
awarded  Critic