Reputation
23,207
Next tag badge:
102/100 score
19/20 answers
Badges
5 48 90
Newest
 Good Answer
Impact
~1.1m people reached

Jul
8
comment Is it possible for someone to read Gmail messages with a man in the middle?
Same thing applies - you'll get a certificate warning, but if you accept it, then you've allowed access.
Jul
8
revised Securing the bootloader
deleted 16 characters in body
Jul
8
comment Is it possible for someone to read Gmail messages with a man in the middle?
This is the whole point behind MITM - you get in the middle of the traffic and offer a fake certificate so that you get the unencrypted messages.
Jul
8
comment Obfuscated JS Code That Breaks On De-Obfuscating Or Debugging
That's quite a stretch on the intent.
Jul
8
revised Is Rfc2898DeriveBytes using HMAC SHA1 still considered “secure enough” for hashing passwords?
edited tags
Jul
8
comment Insert hidden link in Skype
Great work. You can mark this as the accepted answer.
Jul
8
reviewed Approve Stun scripts/webRTC IP leaks
Jul
8
reviewed Leave Open Implications of IP Address as Subject Alt Name in certificates
Jul
8
comment Implications of IP Address as Subject Alt Name in certificates
Server name is trivially resolvable to (public) IP, so I don't see a security issue. Functionally, though, it might not help.
Jul
8
reviewed Close Obfuscated JS Code That Breaks On De-Obfuscating Or Debugging
Jul
8
comment Obfuscated JS Code That Breaks On De-Obfuscating Or Debugging
Code analysis is off topic for this site.
Jul
8
reviewed Leave Open Using UUIDs for non-guessable URLs
Jul
8
comment Is my ISP trying to impersonate google?
That would be my suspicion
Jul
8
revised Javascript phishing attack sucker: Do I need to be worried?
added 4 characters in body
Jul
8
reviewed Reject Javascript phishing attack sucker: Do I need to be worried?
Jul
7
comment Are images created with commercial software stamped with identifiers that can be traced back to a serial number?
In short, you're asking about the software using steganography to embed metadata about the software and host into the image.
Jul
7
comment How do i make a phone number authetication system for my website?
have you considered something like the Google Authenticator API?
Jul
7
reviewed Reject Is there a way to make a WEP-secured AP uncrackable?
Jul
7
reviewed Approve Is there a way to make a WEP-secured AP uncrackable?
Jul
7
reviewed Close Any standard tests to prevent hacking?