Reputation
1,082
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 5 14
Newest
 Curious
Impact
~46k people reached

  • 0 posts edited
  • 1 helpful flag
  • 51 votes cast
Aug
3
comment Self-signed certificates not working over Internet?
Unfortunately all current browsers always require both 1) and 2) for https -- this is not true. They perfectly accept HTTPS connections with 1) only, they just warn you that 2) is not in place (and possibly make you go through hoops to get to the HTTPS page)
Jul
31
comment Scam caller claimed to have elderly friend's “Windows unique identifier”
+1, the fashionable thing to to today is also to encrypt your computer and give you the decryption key (or not) after some payment has been done. This is usually quicker than to talk someone into paying for a "fix" or "antivirus".
Jul
31
comment Formal functional relationship between risk and CVSS
Thanks. i) I know about the implications of CVSS (your three last paragraphs). My point is to look at a cumulative rating to have a global rating taking into account all vulns and their level, ii) the exponential part is a gut feeling (per my question), I was looking for some harder facts (if they exist)
Jul
31
asked Formal functional relationship between risk and CVSS
Jul
23
awarded  Curious
Jul
22
accepted Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?
Jul
22
comment Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?
I will give up then (and accept your answer) :) I use vulnerability scanners for years and am also from the pre-CVE era - so I get all your points. All this assumes that I will have a server to scan (which will show that it is vulnerable) but won't help to answer the question in principle (without actually assessing the server, but by merely looking up if, for a given version, it is invariably vulnerable). Thanks.
Jul
22
comment Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?
I mentioned vulnerability scanners in my question, as well as sources for information on vulns. I do not want to scan for vulnerabilities, I want to know, in principle, which services will be vulnerable.
Jul
22
revised Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?
added 37 characters in body
Jul
22
asked Where to check if a specific OS / service is vulnerable despite being patched, because of a vendor's decision?
Jul
9
comment Web services API key
do you want to secure the call from the app to the API? (looks so from the first part of the question) Or a call from your server (looks so from the last paragraph)? is there some authentication in place?
Jul
8
comment Charles Proxy can not capture message sent over SSL connection
The app is contacting her server in HTTPS and expects to see its certificate. What happens is that that Charles Proxy intercepts this traffic (otherwise it does not make sense to analyze it) and therefore terminates the HTTPS connection on its own certificate (ane presents it to the app). In a browser you would see a warning (certifictae does not match site, or similar) - the app just probably aborts the connection.
Jul
8
answered Charles Proxy can not capture message sent over SSL connection
Jul
8
reviewed No Action Needed Charles Proxy can not capture message sent over SSL connection
Jul
8
comment Can OpenVPN monitor my passwords in my browser?
@Raminlich: you can imagine that a site in https://... ensures security between your browser and that site, no matter the underlying network. So VPN or not, your passwords are encrypted in transit. VPN adds an extra layer of security on top of that. Feel free to accept the answer if it answered your question (this is the check mark under the upvote counter which then turns green)
Jul
8
revised Can OpenVPN monitor my passwords in my browser?
deleted 19 characters in body
Jul
8
revised Can OpenVPN monitor my passwords in my browser?
deleted 19 characters in body
Jul
8
revised Can OpenVPN monitor my passwords in my browser?
deleted 19 characters in body
Jul
8
answered Can OpenVPN monitor my passwords in my browser?
Jul
7
comment Email injection in simple terms?
@Jahan: you mentioned that you use PHP - best would be to go though this page linked in the Wikipedia article. Then if you have issues with code the best place to ask is probably Stack Overflow.