261 reputation
29
bio website
location
age
visits member for 2 years, 5 months
seen Oct 23 '13 at 4:34

Feb
9
awarded  Notable Question
Feb
5
comment How to test my website for the rails YAML vulnerability
can you explain the metasploit parameters required for the test?
Feb
2
comment How to test my website for the rails YAML vulnerability
I've checked with tinfoil and it comes up as vulnerable, but my metasploit test shows as not vulnerable..
Feb
2
comment How to test my website for the rails YAML vulnerability
so if I see in my rails log that the the webserver is running on port 52345 then that is the RPORT? or is it the port that the webserver listens to?
Feb
2
asked How to test my website for the rails YAML vulnerability
Dec
7
awarded  Critic
Dec
7
comment How can I prevent users from using bad passwords in my web application?
that is not the question. forcing a user to use another service to login will limit me to those kind of users (not everyone have facebook,gmail,twitter) and the list of third parties could be very long. Also, This doesn't improve security. There have been accounts of hacking one account results in enabling access to others. Also, easy-to-remember for one is not easy to remember for others
Dec
4
awarded  Teacher
Dec
4
answered How should I select an antimalware solution?
Dec
3
accepted How can I prevent users from using bad passwords in my web application?
Dec
3
awarded  Yearling
Dec
3
awarded  Commentator
Dec
3
comment Is it possible to make an xss with only html tags
is there a comparison for htmlpurifier vs ruby sanitize? how do you know it is more advanced?
Dec
3
accepted Is it possible to make an xss with only html tags
Dec
3
comment Is it possible to make an xss with only html tags
is it possible if " is escaped?
Dec
3
asked Is it possible to make an xss with only html tags
Dec
3
awarded  Custodian
Dec
3
reviewed Approve suggested edit on How can I prevent users from using bad passwords in my web application?
Dec
3
comment How can I prevent users from using bad passwords in my web application?
this gets complicated when you include multi-language passwords
Dec
3
comment Updated list of bad/overused passwords
thanks @MarkBurnett . Nice to know what the list is being updated. Hopefully you will be the first to see a shift in user passwords and towards better security