Rook

21,194 reputation

11969

bio	website	stachliu.com
	location
	age
visits	member for	2 years, 4 months
	seen	15 hours ago
stats	profile views	1,125

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.

	21,194 reputation	bio	website	stachliu.com	visits	member for	2 years, 4 months
11969 badges		location			seen	15 hours ago

summary answers questions tags badges favorites bounties reputation activity

481 Posts

suggestions reviews revisions comments badges posts accepts all

May 19	answered	Is cookie-based XSS exploitable?
May 18	answered	User entered Javascript security implications
May 18	answered	Is it safer to store the XSRF value inside your JavaScript?
May 18	answered	Detecting skimmers and other ATM traps
May 17	answered	Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet?
May 17	answered	Security differences between Passive and Active RFID tags
May 14	answered	Are CSRF Attacks Really Blind
May 13	answered	How to hide victim pop-up in clickjacking?
May 10	answered	Security of web services (REST & SOAP)
May 8	answered	Is it possible for a hacker to download a php file without executing it first?
May 5	answered	Are phone calls on a GSM network encrypted?
May 4	answered	How to make sandbox-only internet access?
May 4	answered	A filesystem with chunks hidden all over the internet?
May 4	answered	Penetration testing Windows Phone 8 apps w/o source
May 4	answered	How can I find subdomains of a site?
May 3	answered	Resources/materials for implementing secure web services?
May 3	answered	Blocking network access to host(s) at the kernel level in Linux?
May 2	answered	The safest way to circumventing Iran's Internet censorship
May 2	answered	HMACSHA512 versus Rfc2898DeriveBytes for password hash
May 1	answered	Are these two ways safe?