396 reputation
111
bio website
location
age
visits member for 1 year, 4 months
seen May 14 at 15:52
stats profile views 26

May
12
revised Activation Protection Technologies in Windows 8
rephrased question to sound more in terms of technology question rather than a cracking question
May
12
asked Activation Protection Technologies in Windows 8
May
11
asked No apparent effect after editing some JSON in the memory of a Flash process
May
10
comment Securing Downloadable Files on Website Per User
Not sure how you manage "logins". But in any case, it would be still better to support password protected PDFs.
May
9
awarded  Popular Question
May
9
comment Is showing your IP address in the URL a bad practice?
I cant think why would this happen except that it just erases the DNS reconnaissance step ...
May
9
accepted Responsible Disclosures and Getting Sued
May
9
asked Responsible Disclosures and Getting Sued
May
1
answered Secure cookies and Path Length Constraint
Apr
15
answered Is it better to choose a single vendor or multiple vendors
Apr
14
comment how can you inject malicious code into an innocent-looking URL?
+1 for the example.
Apr
13
revised How to manage team passwords?
changed title of the question , and changed paragraph for second line.
Apr
13
suggested suggested edit on How to manage team passwords?
Apr
12
comment DDoS - Impossible to stop?
DDoS just reminds me of SpamHaux attack using open Resolvers DNS :D
Apr
12
answered Secure login system - using sessions?
Apr
12
comment Avoiding direct object references
To add, I think having key (even if encrypted) is risky for SQLi
Apr
12
comment User privileges for unsanatized code
For the bad coding part, can you mention what underlying technologies and languages you using ?
Apr
12
accepted Benefits of Content Security Policy
Apr
12
accepted Security Practices by Employees in a Corporate Environment
Apr
12
comment Security Practices by Employees in a Corporate Environment
@DeerHunter : its not always true that my boss's system will have more confidential data than mine ..for instance I manage the logins to server so i maintain the list in an excel file having the server hostname's and passwords which can be juicy stuff for an attacker.