Reputation
3,339
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
13 35
Impact
~128k people reached

Aug
29
reviewed Close Are there any pen testing tools/methods for wpa2 networks that don't require using an adapter that supports monitor mode?
Aug
28
comment How to secure server when the root password is changed
Don't give them root password until they pay you. To demonstrate the website, you don't even need to provide them access to the server.
Aug
23
comment Thousands of 404s from various search engines
You have significantly modified your question after you realize that the porn redirects are of your own doing rather than a security breach. I am voting to close this as off-topic. You should post a new question on webmaster instead where it is more relevant.
Aug
22
answered Thousands of 404s from various search engines
Aug
16
reviewed Close Professional certifications for IT Security
Aug
16
reviewed Close Kaspersky Lab malware faking. How worried should I be?
Aug
16
reviewed Close How can Heartbleed checkers determine if a site is vulnerable?
Aug
10
reviewed Close Security concerns with opening ports
Aug
10
comment How to trace source of clickjacking attack within a website using developer tools?
@SilverlightFox, yup, that would be a typical case of clickjacking. In this case, user clicks are being hijacked to launch the malicious link. The only difference is that user is made aware after the fact due to the new window popping up (it didn't pop-under on a mobile browser).
Aug
10
comment How to trace source of clickjacking attack within a website using developer tools?
@NeilSmithline, I didn't say it isn't. A malicious page is launched as a result and I didn't click on the ads. Are u saying this isn't clickjacking?
Aug
10
reviewed Leave Open Is it possible to execute Server Side Scripts despite Content-Type header?
Aug
10
comment How to trace source of clickjacking attack within a website using developer tools?
I am not asking how to defend against clickjacking, but how to identify such a threat.
Aug
10
revised How to trace source of clickjacking attack within a website using developer tools?
added 6408 characters in body; edited title
Aug
9
asked How to trace source of clickjacking attack within a website using developer tools?
Aug
9
reviewed Leave Open Does Microsoft EMET protect against latest Hacking Team Adobe Flash 0-day exploit?
Aug
9
reviewed Approve Ransom attacks - can I protect myself by encrypting all my files?
Aug
9
comment How trustworthy is SELinux?
+1 for "Kernel or OS is not the only place where you need to hide the backdoor. There are networks on which your backdoor need to communicate. There are log and network traffic monitors which analyse every action performed at the system or network level."
Aug
5
comment How to prevent abuse of SMTP by sending spam emails?
I think your question should be "how to configure your MTA to stop relaying external email". This is more suited for serverfault.
Aug
5
comment Is it possible to execute Server Side Scripts despite Content-Type header?
You are correct. The server will execute the script if it has the permission to do so. The content type header only affects rendering of whatever output of the script on the browser.
Aug
4
comment Is HTML5 vibrate feature a security vulnerability?
Yup, I didn't notice that message is generated by the website initially because the incessant vibration distracted me.