Reputation
33,195
Next tag badge:
94/100 score
25/20 answers
Badges
4 49 124
Newest
 Nice Answer
Impact
~1.7m people reached

Mar
14
comment How to create a OSx pen testing environment
A mac? I would install a Linux distro with a good package manager.
Mar
13
awarded  Nice Question
Mar
13
revised OAuth2 Cross Site Request Forgery, and state parameter
deleted 5 characters in body
Mar
11
revised What is the most hardened set of options for GCC compiling C/C++?
deleted 13 characters in body
Mar
1
revised How to safely display html emails like gmail does it?
added 2 characters in body
Mar
1
revised How to safely display html emails like gmail does it?
added 34 characters in body
Mar
1
answered How to safely display html emails like gmail does it?
Feb
24
awarded  Popular Question
Feb
24
revised Cross site scripting and the use of http-only cookies?
added 1 character in body
Feb
23
awarded  Enlightened
Feb
23
awarded  Nice Answer
Feb
18
comment How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
@Daniel Magliola The only one you are fooling with cargo-cult security is yourself.
Feb
18
revised How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
added 147 characters in body
Feb
18
comment Session Authentication vs Token Authentication
@SilverlightFox Interesting, I was not aware of that weakness. Not surprising coming from Microsoft.
Feb
17
answered Using INTO OUTFILE with INSERT
Feb
17
comment Using INTO OUTFILE with INSERT
@Mints97 did you even try this? Sub-selct doesn't allow into outfile.
Feb
17
comment How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
SSL was deprecated over a decade ago, I sure hope you aren't using SSL. TLSv1 or later is the only acceptable secure transport layer.
Feb
17
answered How can I set my server to only accept requests from my own client app? (similar to SSL Client Certificates)
Feb
16
comment Session Authentication vs Token Authentication
@Hoax that is a separate question. The OAuth flow is really useful.
Feb
16
revised Prevent a desktop client application from abusing an API access token obtained through OAuth2 on behalf of an application
added 19 characters in body