305 reputation
112
bio website francisco.io
location Valencia, Spain
age 23
visits member for 2 years, 8 months
seen 5 hours ago

Learning for fun and helping others in the way. Knowledge is - or should be - free.

My website: http://francisco.io/

Projects I've put a considerable ammount of effort.

Experiments. Reinventing the wheel for learning and fun.

  • HTML preprocessor: shortening the html you have to write.
  • Matrix in jquery. Everyone should do one.

Other awards


Dec
9
comment Is Changing a File Type and Name an Effective Security Solution?
Check this DefCon video to see that no, it doesn't help. Basically, the inner filetype won't match the extension, so your file gets the first in the list of suspicious files.
Nov
20
awarded  Nice Question
Nov
6
awarded  Citizen Patrol
Nov
6
comment How different should my passwords be?
Exactly the same question, over 1 year ago: security.stackexchange.com/q/39300 (I know because it's mine).
Nov
1
comment What stops a developer from accessing credit card details and other secret data from a company
I would go with the old story: Locks are on doors only to keep honest people honest. One percent of people will always be honest and never steal. Another 1% will always be dishonest and always try to pick your lock and steal your television; locks won't do much to protect you from the hardened thieves, who can get into your house if they really want to. The purpose of locks, the locksmith said, is to protect you from the 98% of mostly honest people who might be tempted to try your door if it had no lock.
Oct
16
comment How do web email clients store my passwords from other providers?
That was basically the question, what method/way do they use to encrypt/decrypt them...
Oct
16
comment How do web email clients store my passwords from other providers?
Hotmail needs the popbox login, which you enter only one time, and stores this permanently on its own servers This is exactly what I meant to say. How do they store my credentials securely on its own server? That was my question, I'm sorry for making it confusing
Sep
19
comment Why is it a security problem not to update one's browser?
Because otherwise you can find front-end developers hunting you down with a keyboard for using IE6
Sep
13
comment Is my custom password hashing algorithm insecure?
TL;DR yes, it is insecure. Don't roll your own hashing algorithm
Jul
16
revised How do web email clients store my passwords from other providers?
deleted 29 characters in body
Jul
16
comment How do web email clients store my passwords from other providers?
I'm just saying that there's the possibility that the master passwords is derived from my main password and stored in cookies; so it can be retrieved from cookies OR when I log in.
Jul
15
revised How do web email clients store my passwords from other providers?
edited tags
Jul
15
asked How do web email clients store my passwords from other providers?
Jul
15
accepted How to store passwords securely in my server?
Jul
10
comment Should I get an antivirus for my Mac?
References for [...] there were historically so few viruses around for Mac is because their market share was so small. please? I had understood that it had to do more with, historically, windows being run as admin and *nix systems not being root by default.
Jul
2
awarded  Curious
Jun
22
comment How to store passwords securely in my server?
@eric I haven't, I've searched for previous questions in security.SE since it seems like the good place to ask about security. Thanks for the link.
Jun
22
comment How to store passwords securely in my server?
@eric, no, they don't. However, this is a slightly broader question; it's not about supporting my uni's email, it's about supporting imap securely.
Jun
22
asked How to store passwords securely in my server?
Jun
17
comment Allowing users to input a safe subset of HTML
What would happen if I only wrote </body>? This should give you an idea of what can go wrong. For the images/link, you can put them in a query and manually check them (before or after allowing for public viewing).