Reputation
3,579
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
14 37
Impact
~166k people reached

Nov
28
comment Understanding hack on ecommerce site
It seems to me that you understood what is going on with the malicious script. A more useful approach is to scan through your server access log and look for lines containing shell.php. It contains all your customers' credit card info.
Nov
14
reviewed Leave Open Least riskiest option when it comes to reinstalling the OS
Nov
11
comment Why should you redirect the user to a login page after a password reset?
This would depend on the password reset mechanism. A user resetting password because he doesn't remember the password would normally not have a session since he is not logged in. IMO there could be some problem in the way the sentence is worded if "the" session refers to sessions created by other users on the same account.
Nov
7
awarded  Popular Question
Oct
17
reviewed Close VirtualBox: Opening appliance with 7zip
Oct
17
comment Strange Payment Gateway
Nevertheless, this is still a useful answer. +1
Oct
12
comment Why do web services keep asking me about my phone number?
Unless the web service is a banking website or a government e-service portal where security is important, I suggest you not to offer your phone number if you value your privacy.
Oct
10
awarded  Popular Question
Oct
5
awarded  Notable Question
Sep
27
reviewed Leave Open Client sent certificate with zero bytes but ssl is working fine
Sep
26
reviewed Close LFI exploitation using data://
Sep
26
reviewed Close Why do websites limit what special characters you use in a password?
Sep
26
reviewed Close Authenticating users by checking if the key can decrypt a phrase vs by checking a password against a database
Sep
26
reviewed Close what fields should I encrypt in a database containing user information?
Sep
26
reviewed Close Recover 7zip password with partial password matching
Sep
24
reviewed Close Hashing user passwords via Javascript client-side versus server-side hashing?
Sep
24
reviewed Leave Open Forensics procedures, volatile data collection
Sep
24
reviewed Close Tips if someone else is using “my” username on another site
Sep
24
comment System breach or OpenSSH glitch?
Fedora 20 has reached EOL (end of life). Please upgrade your server to the latest OS if you are concern about the security of your machine.
Sep
19
reviewed Close robots.txt and risk associated