meta user
network profile
| bio | website | stachliu.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 4 months |
| seen | 7 hours ago | |
| stats | profile views | 1,124 |
Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.
I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.
|
7h |
comment |
Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet? @Steel City Hacker Cloudflare has had problems with neighboring nodes becoming initiated with traffic. However, this does not change the solution. CERT suggests restricting DNS clients to 5 resolutions per second... that times 27 million hosts is still a massive amount of traffic. A real solution is to segregate the internet, HTTP servers do not need UDP traffic routed to them. In the highly unlikely event of a Neighbor node to your Amazon EC2 host goes down, then that is their problem, they should consider segregation. |
|
1d |
comment |
Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet? @Steel City Hacker so did you just say: "if you do what cloudflare does then you will fail because you are not using a service like cloudflare"... |
|
1d |
comment |
What parts of Bouncy Castle are affected by patents? A few things are certain: Its highly illegal, you owe someone millions, and you should feel bad for breaking the law. |
|
May 19 |
revised |
Is cookie-based XSS exploitable? added 7 characters in body |
|
May 19 |
answered | Is cookie-based XSS exploitable? |
|
May 18 |
comment |
User entered Javascript security implications Yes, but what if this JavaScript is on its own subdomain? You missed a vital part of this question. |
|
May 18 |
answered | User entered Javascript security implications |
|
May 18 |
revised |
Is it safer to store the XSRF value inside your JavaScript? added 65 characters in body |
|
May 18 |
answered | Is it safer to store the XSRF value inside your JavaScript? |
|
May 18 |
comment |
How to prevent restrict access to a web application to authorized devices only? Will never be possible! This question has been asked over 9,000 times, and everyone who asks it doesn't understand even the most basic concepts of security. |
|
May 18 |
revised |
Detecting skimmers and other ATM traps deleted 8 characters in body |
|
May 18 |
comment |
Detecting skimmers and other ATM traps yeah if you could push the doc, that would be awesome. |
|
May 18 |
comment |
Detecting skimmers and other ATM traps Do you have a link or any additional information? |
|
May 18 |
answered | Detecting skimmers and other ATM traps |
|
May 17 |
answered | Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet? |
|
May 17 |
revised |
Security differences between Passive and Active RFID tags added 131 characters in body |
|
May 17 |
comment |
What can be used to keep xp_CmdShell in SQL Server disabled? luckily there isn't down-votes for comments, but seriously now, why would they allow shell access from SQL injection? Seriously, why? Oah Microsoft, why do you eat the glue? |
|
May 17 |
answered | Security differences between Passive and Active RFID tags |
|
May 17 |
comment |
Security concept Hopefully the edits made this more clear... |
|
May 17 |
revised |
Security concept deleted 32 characters in body |
