2,610 reputation
528
bio website fussfreehome.com
location Worldwide
age
visits member for 2 years, 8 months
seen 1 hour ago

I don't have any formal education on programming. I guess it is the passion that gets me started and keeps me going. Thanks everybody for sharing your knowledge. Don't worry, I am no critic. I see no wrong answer, only good and not so good answers. All are welcome to learn and to share.


1h
comment Identifying an ongoing exploit?
Before you pull the plug on your server, access your website one last time from a live CD environment and download all the HTML, JS and CSS files for forensic investigation as it may contain important clues that you won't find on the files in your webroot.
1d
accepted Is HTTPS over UDP secure?
Dec
14
comment Is HTTPS over UDP secure?
Thanks. Can I say that reliability of a connection does not affect its security at all?
Dec
14
revised Is HTTPS over UDP secure?
added 69 characters in body
Dec
14
asked Is HTTPS over UDP secure?
Nov
8
awarded  Custodian
Nov
8
reviewed No Action Needed While logged in to Google etc., can a malicious site discover my ID?
Nov
5
comment How to prove someone sent an email to you?
So is the person sending from his Gmail account? If so, Google would have a list of his IP addresses already. From there you can trace to his ISP and home address. But you would need a court order.
Nov
5
comment Why wouldn't it be great, if HTTP/2 would only allow communication via TLS?
SSL cert is not free. If I remember correctly, even for the CA providing "free" cert, you need to pay to revoke it.
Nov
4
reviewed Approve IDS across seperate AWS accounts
Nov
3
comment Question about a simple strong password management system
It is not user friendly. User still needs to remember something (row number) and in addition, needs to open password file, scroll to the correct row, copy and paste password for each login.
Nov
3
reviewed Approve Question about a simple strong password management system
Nov
2
comment Questions on reflected file download (RFD) attack
Thanks for clearing my doubts :)
Nov
2
accepted Questions on reflected file download (RFD) attack
Nov
1
awarded  Nice Answer
Nov
1
comment Questions on reflected file download (RFD) attack
For 2) Can you state clearly which OSes are affected by the vulnerability? Are all versions of windows affected? Are all versions of Linux and OSX not affected?
Nov
1
comment Questions on reflected file download (RFD) attack
For 1) Can you elaborate on what you mean by the value of s was reflected? I don't understand the part where /s; works while /a; does not. How does the request trick the server to set the content-type and disposition headers when there are no files to send over?
Nov
1
reviewed Looks OK Preventing deauthentication attacks
Nov
1
reviewed Approve How do I use “openssl s_client” to test for (absence of) SSLv3 support?
Nov
1
comment Do I need antivirus for this unusual installation - or just firewall?
Agree with this. To be extremely paranoid and if windows firewall allow, I would reject all outbound connections to all ports and all destinations except HTTPS to Google and the university.