Andrey Botalov

1,132 reputation

1031

bio	website
	location	Minsk, Belarus
	age	22
visits	member for	1 year, 7 months
	seen	5 hours ago
stats	profile views	120

	1,132 reputation	bio	website		visits	member for	1 year, 7 months
1031 badges		location	Minsk, Belarus		seen	5 hours ago

summary answers questions tags badges favorites bounties reputation activity

550 Actions

suggestions reviews revisions comments badges posts accepts all

Oct 4	revised	SSL Breach - Does the latest BEAST vulnerability mean SSL Issuers now have to worry about integrity? edited tags
Oct 4	revised	TLS 1.0 JavaScript injection vulnerability (BEAST): what to do client-side? edited tags
Oct 4	revised	How to test for the BEAST attack if server isn't Internet-connected? edited tags
Oct 4	revised	Next Microsoft Patch Tuesday include BEAST SSL fix edited tags
Oct 4	revised	Is BEAST really fixed in all modern browsers? edited tags
Oct 4	revised	Why was the BEAST attack previously considered implausible? edited tags
Oct 4	revised	Should I ignore the BEAST SSL exploit and continue to prefer AES? edited tags
Oct 4	revised	How to fix SSL 2.0 and BEAST on IIS edited tags
Oct 4	revised	Is there a way to mitigate BEAST without disabling AES completely? edited tags
Oct 4	revised	Average number of exploitable bugs per thousand lines of code? edited tags
Oct 4	revised	Securing Windows 7 using Bluetooth edited tags
Oct 4	revised	Intercept data sent via bluetooth edited tags
Oct 4	revised	Should we start using SHA-3? edited tags
Oct 4	revised	What is SHA-3 and why did we change it? some fixes
Oct 4	suggested	suggested edit on What is SHA-3 and why did we change it?
Oct 3	revised	Is it possible to verify identity of site that sent request to you? deleted 21 characters in body
Oct 3	comment	Is it possible to verify identity of site that sent request to you? Code for creating widget may be placed to several places. The easiest attack may be to place this widget to localhost and then reload it many times. But I don't want to pay for such requests as it's not even rendered on site where it should be. There is no problem for me if widget isn't placed at traget site (No views => No pay). There is a problem if it will be placed somewhere else except target site.
Oct 3	comment	Is it possible to verify identity of site that sent request to you? Yes, I pay per view
Oct 3	revised	Is it possible to verify identity of site that sent request to you? added 90 characters in body
Oct 3	comment	Is it possible to verify identity of site that sent request to you? It won't prevent from embedding widget to another sites. As I said, I pay to site for each widget show so I want to actually verify that this show was at valid site where widget was intended to be.