1,458 reputation
612
bio website colibrifrost.com
location
age
visits member for 2 years, 7 months
seen 20 hours ago

I enjoy writing a programming and security focused blog complete with code snippets.

I try and exemplify very useful and tricky pieces of code, explain different security concepts and review some of my favorite books.

I learned a lot from open source projects so I try and publish my more exciting and useful programs on GitHub.

All in the name of fun and education.


Oct
4
comment where can I find list of zero day vulnerability?
It is a vulnerability for which there is no patch.
Oct
4
answered Understanding the security of my home network
Oct
4
revised WRT1900AC and network monitoring
deleted 2 characters in body
Oct
4
answered WRT1900AC and network monitoring
Oct
4
answered How to generete dictionary for brute force attack?
Sep
26
comment HTTPS self signed certficiate for personal website
if you're the only one using it then that's fine. Root CAs are to verify ownership for public websites
Sep
24
awarded  Autobiographer
Sep
20
comment Reflected XSS script passing through URL how to make it work and what are the preconditions for it to work?
I use iceweasel. Ive heard good thing about owasp mantra
Sep
20
comment Reflected XSS script passing through URL how to make it work and what are the preconditions for it to work?
dont use chrome, or any modern browser. the default browser of kali allows for reflected xss to be easily tested
Sep
19
answered Is it possible to hack an Android App or an Android device without being root?
Sep
10
comment How to keep someone from analyzing our site?
@Peteris Its about increasing the level of effort. If this is a "script kiddie" does he really feel like hopping on tor or using a vpn? Maybe maybe not. Blocking an ip is not necessarily difficult. If he continues you've at least profiled the threat and have more information now than you did before.
Sep
10
answered How do I know that my connection is really encrypted?
Sep
10
comment How to keep someone from analyzing our site?
Block the IP for a couple of weeks? The attacker will possibly loose interest and move on to the next site.
Aug
26
asked Default logging systems/directories for security monitoring
Aug
20
answered Sandbox environment for “php malware” analysis
Aug
20
comment How to protect source code locally when traveling with it
@MatthewPeters a full source code review is moving forward and the project has been picked up. I wouldn't call that dead.
Aug
20
answered How to protect source code locally when traveling with it
Jul
6
answered (Android) hacking server by a simple socket
Jul
6
comment (Android) hacking server by a simple socket
If the question is concerned about RE to begin with i would say any stored secrets on the client would be less than optimal. Although you are right in that this will increase the effort and may discourage some bad users
Jul
3
comment (Android) hacking server by a simple socket
In this case the secret is stored on the client correct?