2,568 reputation
528
bio website fussfreehome.com
location Worldwide
age
visits member for 2 years, 7 months
seen Nov 8 at 5:12

I don't have any formal education on programming. I guess it is the passion that gets me started and keeps me going. Thanks everybody for sharing your knowledge. Don't worry, I am no critic. I see no wrong answer, only good and not so good answers. All are welcome to learn and to share.


Nov
8
awarded  Custodian
Nov
8
reviewed No Action Needed While logged in to Google etc., can a malicious site discover my ID?
Nov
5
comment How to prove someone sent an email to you?
So is the person sending from his Gmail account? If so, Google would have a list of his IP addresses already. From there you can trace to his ISP and home address. But you would need a court order.
Nov
5
comment Why wouldn't it be great, if HTTP/2 would only allow communication via TLS?
SSL cert is not free. If I remember correctly, even for the CA providing "free" cert, you need to pay to revoke it.
Nov
4
reviewed Approve suggested edit on IDS across seperate AWS accounts
Nov
3
comment Question about a simple strong password management system
It is not user friendly. User still needs to remember something (row number) and in addition, needs to open password file, scroll to the correct row, copy and paste password for each login.
Nov
3
reviewed Approve suggested edit on Question about a simple strong password management system
Nov
2
comment Questions on reflected file download (RFD) attack
Thanks for clearing my doubts :)
Nov
2
accepted Questions on reflected file download (RFD) attack
Nov
1
awarded  Nice Answer
Nov
1
comment Questions on reflected file download (RFD) attack
For 2) Can you state clearly which OSes are affected by the vulnerability? Are all versions of windows affected? Are all versions of Linux and OSX not affected?
Nov
1
comment Questions on reflected file download (RFD) attack
For 1) Can you elaborate on what you mean by the value of s was reflected? I don't understand the part where /s; works while /a; does not. How does the request trick the server to set the content-type and disposition headers when there are no files to send over?
Nov
1
reviewed Looks OK Preventing deauthentication attacks
Nov
1
reviewed Approve suggested edit on How do I use “openssl s_client” to test for (absence of) SSLv3 support?
Nov
1
comment Do I need antivirus for this unusual installation - or just firewall?
Agree with this. To be extremely paranoid and if windows firewall allow, I would reject all outbound connections to all ports and all destinations except HTTPS to Google and the university.
Oct
31
reviewed Approve suggested edit on Questions on reflected file download (RFD) attack
Oct
31
asked Questions on reflected file download (RFD) attack
Oct
31
comment Why are drives overwritten three times when being disposed of?
Is this really the case? Then would overwriting data with random bits remove all traces at once?
Oct
31
answered What stops a developer from accessing credit card details and other secret data from a company
Oct
31
comment Is there a secure way to share sessions in the same server with different sub domains?
I'm avoiding exposing session id in requests. How do you maintain session state without transmitting session id? Is the persistent session backend, frontend or both?