5,839 reputation
31038
bio website adranos.com
location
age
visits member for 1 year, 11 months
seen Feb 13 at 14:40

@TildalWave said having a sig would encourage more people to view my profile. Also beer.


Aug
14
answered A scammer placed a remote file on a Wordpress website?
Aug
14
comment Site Executing control characters in title tag
Sounds like maybe they are doing search.matches("[\w]+") rather than search.matches("^[\w]+$"). As to whether this is exploitable, I'm unsure - it would depend on what other functions the search term is passed through.
Aug
13
comment Does a network behind a NAT\modem firewall need a firewall?
@sectek Remote-execution exploits exist for some older incarnations of the Linksys software stack, the firewall configuration is largely irrelevant in such cases.
Aug
13
comment Is it possible to respect a user's privacy while collecting phone MAC addresses?
My phone keeps track of where your chosen WiFi networks are using GPS, then only turns on the WiFi when the GPS indicates that you are nearing a saved network. This I think is a great feature.
Aug
13
comment Is it possible to respect a user's privacy while collecting phone MAC addresses?
@CodesInChaos gotcha, somehow I got lost in the double/triple negatives and thought you were arguing the opposite.
Aug
13
comment Is it possible to respect a user's privacy while collecting phone MAC addresses?
@CodesInChaos not sure what point you're making. Longer identifiers are worse for privacy. Saying MAC addresses are short implies they cannot be used to ID people uniquely - imagine a 2 bit MAC. Also 48 bits is a long ID when you're talking about things like human beings.
Aug
13
comment Cross site scripting prevention removing &lt and &gt
@Nucklear if you have thrown everything from that OWASP page at your filter, then you're probably pretty good. Whitelisting is still the preferred approach however. eg msg.matches("[\w\s]*")
Aug
13
answered Cross site scripting prevention removing &lt and &gt
Aug
7
answered Recommended options for LUKS (cryptsetup)
Aug
7
comment Is a cookie safer than a simple HTTP header?
Are you saying Referrer contains the full query string? Or just variables passed as part of the path?
Aug
5
comment buffer overflow attack scripts
Also, if you are seeing these strings in the context of a specific vulnerability, what you are looking at is the whole exploit; the shellcode and the correct structure and address overwrite.
Jul
30
answered How to white hat Pen Test SQL injection
Jul
22
reviewed Leave Open Eye-Tracking, Public Access Points and Password Protection
Jul
17
reviewed Leave Open Write & “WHERE” Clause Only?
Jul
17
reviewed Leave Open Brute forcing ssh keys
Jul
17
reviewed Leave Open How much detail to publicise when a software vendor patches and issues an advisory?
Jul
17
comment Modern, security-conscious, PHP book?
In answer to your final paragraph; PHP security is a great area to be in career-wise. Given that the vast majority of sites out there are PHP and very insecure. People scoff at PHP because it lends itself to being very badly written. It is also a pretty broken language in general, making it often difficult to secure properly. PHP is unlikely to be a technology of choice when implementing a security-focused system for these reasons.
Jul
17
comment To get security clearance, do I need to be national of the country?
Most IT Security jobs involve sitting on a chair, and using a keyboard, we don't answer questions about peripherals here though.
Jul
17
comment To get security clearance, do I need to be national of the country?
This question appears to be off-topic because it is about Personnel Security.
Jul
17
comment How can I audit which type of Block Mode encryption is being used when no source code is available?
"The Source is Always Available" - Lynks, Reverse Engineer, 2013.