18,797 reputation
34899
bio website faiumoni.de/de/start.html
location Germany, Europe
age 33
visits member for 3 years, 11 months
seen Nov 6 at 10:04

My main focus is on security and privacy aspects in the areas of business web applications, databases and online games. I like to look further and see the whole picture.


Jun
30
revised Solution to allow JavaScript input but prevent XSS
html escaping of sample code
Jun
30
revised Solution to allow JavaScript input but prevent XSS
edited body
Jun
30
answered Solution to allow JavaScript input but prevent XSS
Jun
28
comment Email Spoofed. Explain?
There is way to little information in your question to give a detailed answer. What is the domain part of your email-address? What is the domain part of the target's email addres? Is that the complete header? Especially are there more Received/To/From/Date lines? Was 216.212.117.146 your IP-address? Was the private subject line something you have used or something made up by the sender of that email? Do you use an email client or the google webinterface to normally send email?
Jun
28
revised Email Spoofed. Explain?
edited tags; edited title
Jun
27
revised windows wiki excerpt
added 62 characters in body
Jun
27
suggested suggested edit on windows tag wiki excerpt
Jun
27
reviewed Approve suggested edit on windows tag wiki excerpt
Jun
26
reviewed Approve suggested edit on security-theater tag wiki
Jun
26
revised Sharing passwords and credentials between founders and employees
edited tags
Jun
25
comment How can I detect and block bots?
One think to keep in mind are proxyservers. A simple approach may lock out huge numbers of people.
Jun
25
revised Can home routers get infected?
edited tags; edited title
Jun
25
answered Sharing passwords and credentials between founders and employees
Jun
25
comment Sharing passwords and credentials between founders and employees
Are you suggesting to share the credentials with some online service, which already had security issues instead of an employee, known in real life and bound to a contract?
Jun
25
answered How to handle security issues of someone else's website
Jun
25
comment How does changing your password every 90 days increase security?
Furthermore "Rule 6 [change passwords often] will help only if the attacker waits weeks before exploiting the password" is wrong. It ignores the possibility that an attack may be ongoing for weeks without being noticed. Think of an attacker having access to the email account of someone from upper management. It is obvious that the benefit for the attacker may be larger if he keeps reading potential confidential emails instead of abusing the email account for SPAM or locking the owner out by changing the password.
Jun
25
comment How does changing your password every 90 days increase security?
it should be noted, that the research paper is about web-site passwords. I think this implies that the victim is the user himself or herself. In a cooperate environment the company may suffer from an attacker instead of the individual user.
Jun
24
awarded  Nice Answer
Jun
24
revised How does changing your password every 90 days increase security?
edited tags
Jun
22
awarded  Nice Answer