meta user
network profile
| bio | website | slhck.info |
|---|---|---|
| location | Vienna, Austria | |
| age | ||
| visits | member for | 1 year, 7 months |
| seen | Jun 8 at 12:55 | |
| stats | profile views | 7 |
I'm a ♦ moderator on Super User.
I study computer science, with research focus on video coding and human-centered multimedia quality evaluation, and work as a software developer.
If you have any questions about moderation, feel free to ping me in the Ask a Super User moderator chat room. For everything else, write me a mail to my username at me.com.
|
Apr 17 |
comment |
Authentication concept for sites served to another site In the 3-legged OAuth scheme, I take it we are the service provider and the consumer is the CMS. However, this requires the user to actively log in at the service provider, which authenticates the user. This is not possible in our case—the user will authenticate against the CMS first. Or am I missing something? |
|
Apr 17 |
comment |
Authentication concept for sites served to another site @SébastienRenauld We only supply pages that are loaded in an iframe, that's it. Could you elaborate on how that would work? The customer has to log in at the CMS – then the CMS can request almost anything from us, but it has to be via GET. |
|
Apr 17 |
comment |
Authentication concept for sites served to another site We might be able to use HTTPS for all communication. POST is out of the question because we're literally just embedding the content into an iframe, like in the URL example above. Maybe we could authenticate once via POST and then through our backend store… a cookie? Would that cookie work even though we're accessing within an iframe? |
|
Apr 17 |
revised |
Authentication concept for sites served to another site added 23 characters in body |
|
Apr 17 |
awarded | Student |
|
Apr 17 |
asked | Authentication concept for sites served to another site |
|
Feb 23 |
awarded | Citizen Patrol |
|
Nov 12 |
awarded | Yearling |
|
Oct 14 |
awarded | Editor |
|
Oct 14 |
awarded | Excavator |
|
Oct 14 |
revised |
Who (which process) is calling curl? typo "culr_ppid" » "curl_ppid" |
|
Oct 14 |
suggested | suggested edit on Who (which process) is calling curl? |
|
Mar 11 |
awarded | Supporter |
|
Feb 22 |
awarded | Nice Answer |
|
Dec 15 |
comment |
How to scan Javascript for malicious code? I don't think this is as easy as you believe it is. Javascript can't do anything malicious by itself and there's no "virus" to be detected. Javascript is the primary vector for Cross Site Scripting attacks, but it would be better to secure your webapp against this rather than to trust extensions. It's your webapp that's vulnerable and you'd need a good understanding of the webapp in order to analyze extensions for their security. |
|
Nov 12 |
awarded | Teacher |
|
Aug 15 |
answered | How can I avoid my password being harvested by key loggers from internet cafes? |
