Reputation
31,989
Next tag badge:
91/100 score
33/20 answers
Badges
8 67 108
Newest
 Guru
Impact
~1.6m people reached

Feb
16
comment Bad USB malware and Chrome OS
But this doesn't answer the question about being vulnerable
Feb
16
reviewed Close What do I risk, today, if I let Bluetooth activated on my phone?
Feb
16
reviewed Reopen Penetration Testing Vocabulary
Feb
16
comment JS snippets on my live project do not appear in my code residing on my production server
And the adverts are not placed there by the hosting company?
Feb
16
awarded  Nice Answer
Feb
16
awarded  Guru
Feb
16
reviewed Reject Why is disabling root necessary for security?
Feb
16
comment Why can't Google Forms be used for elections?
Most elections are secret ballot. Google Forms is not secret.
Feb
16
revised Android vs iPhone encryption
deleted 152 characters in body
Feb
16
comment VM Kali Linux - nmap why is so slow?
connecting to the internet and connecting to other machines on your network are 2 very different situations - we cannot help you with that
Feb
15
awarded  Enlightened
Feb
15
answered Why is disabling root necessary for security?
Feb
15
comment Why is disabling root necessary for security?
I believe your answer is in the section just above your quote "Create “shadow user” with sudo powers"
Feb
15
comment Can password hashing both client side and on the back end improve security if we don't necessarily trust the server?
An evil server operator has access to everything, and it's their service you are connecting to. I'm unsure of a way to protect a user's password from your own influence.
Feb
15
comment Can password hashing both client side and on the back end improve security if we don't necessarily trust the server?
the answers to this question might address yours: security.stackexchange.com/questions/8596/…
Feb
15
comment Can password hashing both client side and on the back end improve security if we don't necessarily trust the server?
in your scheme, the client-side hashed password becomes the password
Feb
15
comment Access MySQL via MySQL credentials, assuming no remote MySQL, FTP, or SSH access?
@fournines it does not increase the vulnerability of injection attacks, but if there is one, then knowing valid credentials can make a bad situation worse
Feb
15
comment Access MySQL via MySQL credentials, assuming no remote MySQL, FTP, or SSH access?
it will be a little hard to say without scoping out your situation, but the first thing that comes to mind is sql injection attacks
Feb
15
revised Access MySQL via MySQL credentials, assuming no remote MySQL, FTP, or SSH access?
deleted 14 characters in body
Feb
15
reviewed Close What does showing a “security picture & phrase” guard against?