20,789 reputation
33981
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 6 months
seen 5 hours ago

Security Architect


May
4
comment Is there a use-case that renders the password manager obsolete?
@dreftymac Your wording leaves room for interpretation. What you seem to be asking, then, is the case where there is a password reset link.
May
4
revised How does Paypal validate the transaction amount?
added 6 characters in body; edited title
May
4
reviewed Close Government policy toward open source software?
May
4
reviewed Leave Open Ways to secure administrative pages of a portable site
May
4
reviewed Close Threat Modelling Application Decomposition
May
4
reviewed Close ESI and EDI Overflow
May
4
reviewed Close What NIC for a NUC?
May
4
reviewed Close Apache.exe trojan attack on xp server, wiped it with a linux install am i safe?
May
4
reviewed Looks OK How to avoid to lose data encrypted because it was encrypted by no longer supported software?
May
1
revised Exploiting a desktop application
added 15 characters in body
May
1
reviewed Approve How is the session ID sent securely?
May
1
reviewed Leave Open Is testing for SQL injection vulnerabilities still relevant in modern web applications?
May
1
reviewed Close Are multiple applications of a salted Linux MD5 hash easier to break than one?
May
1
reviewed Close Why is a public key called a key - isn't it a lock?
May
1
reviewed Close Anonymity against web analytics and site operators
May
1
comment Search Engine security for searches associated with the same searcher
I'm not sure that we can answer for all search engines. I can guess that Chinese search engines do keep the data correlated.
May
1
comment Why is a public key called a key - isn't it a lock?
The problem is that you are looking at it as an analogy, and not looking at the technology. "Key" is a precise technical term that fits the algorithm involved.
May
1
comment Is it a secure encoder and hasher?
You convert everything to upper, which reduces the entropy of the cyphertext and cut off the outputs to 36 characters. Do you mean to use the same salt for every encryption?
Apr
30
comment In What Ways Can X-Foward-For Header Information Be Used In An Attack
@peterh It's a title, technically, I don't see a problem with it.
Apr
30
answered In What Ways Can X-Foward-For Header Information Be Used In An Attack