312 reputation
110
bio website
location
age
visits member for 2 years
seen Apr 13 at 2:30

Apr
4
comment How can an email from a Yahoo address be sent through Yahoo without authentication?
How did they get all the email addresses from my address book? The TO field contains addresses from my address book. Why did Yahoo accept the sending of an email (SMTP connection) from an unauthenticated outside domain?
Apr
3
revised How can an email from a Yahoo address be sent through Yahoo without authentication?
dk = Denmark
Apr
3
asked How can an email from a Yahoo address be sent through Yahoo without authentication?
Mar
20
comment How does the authentication in the new UK £1 coin work?
Is it a radioactive material?
Mar
2
accepted Has there been any documented cases where hackers have hijacked the phone number to a business?
Mar
2
answered Has there been any documented cases where hackers have hijacked the phone number to a business?
Feb
20
awarded  Citizen Patrol
Feb
20
accepted Is it safe to accept the security certificate from AOL chat?
Feb
20
comment Is it safe to accept the security certificate from AOL chat?
That's a really neat tool (SSL Labs). I'll use that for my own site.
Feb
19
revised Is it safe to accept the security certificate from AOL chat?
added 30 characters in body
Feb
19
asked Is it safe to accept the security certificate from AOL chat?
Feb
14
comment Security of carrying passwords on person
As if it needs to be said, length matters. Complexity isn't as important. A password with ten possible characters that is twenty characters long is much greater than a password with twenty possible characters that is ten characters long. 10^20 >> 20^10. Still, "Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn1" was cracked because it was in a Wikipedia entry, so don't use anything in a novel or poem!
Feb
14
comment Security of carrying passwords on person
You're going to love this! Password Card. Carrying passwords are secure from hackers, but not governments or thieves who can torture you or rifle through your possessions. I used Password Card for a long time, but eventually had so many passwords I had to mark it up to keep track of which is which. I eventually switched to KeePass and now I don't know any of my passwords, but they are super secure.
Feb
6
accepted Is it really secure to store API keys in environment variables?
Feb
3
comment Has there been any documented cases where hackers have hijacked the phone number to a business?
Not quite. I think that involves stealing VOIP credits or minutes. Not recording business lines and stealing credit card info. However I will definitely confirm phone numbers from now on before giving out card info.
Feb
3
comment Is it really secure to store API keys in environment variables?
Thanks! I encrypted the environment variable, so a hacker would require access to both the environment AND the code.
Feb
1
revised Is it really secure to store API keys in environment variables?
deleted 4 characters in body
Feb
1
asked Is it really secure to store API keys in environment variables?
Jan
26
comment How can I make it more difficult for a user to create multiple accounts?
@curiousguy Reddit shadowbans all the time, and they haven't been firebombed.
Jan
23
comment How does Amazon bill me without the CVC / CVV / CVV2?
@Nimbuz With Braintree, yes, because they are both the payment gateway and the merchant bank and charge a flat rate. If you had a large volume and independent merchant bank and payment gateway, I do believe you may be able to negotiate a discount for opting to use CVV and lowering your charge-back rate.