Rook

21,164 reputation

11969

bio	website	stachliu.com
	location
	age
visits	member for	2 years, 4 months
	seen	4 hours ago
stats	profile views	1,120

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.

	21,164 reputation	bio	website	stachliu.com	visits	member for	2 years, 4 months
11969 badges		location			seen	4 hours ago

summary answers questions tags badges favorites bounties reputation activity

388 Revisions

suggestions reviews revisions comments badges posts accepts all

May 19	revised	Is cookie-based XSS exploitable? added 7 characters in body
May 18	revised	Is it safer to store the XSRF value inside your JavaScript? added 65 characters in body
May 18	revised	Detecting skimmers and other ATM traps deleted 8 characters in body
May 17	revised	Security differences between Passive and Active RFID tags added 131 characters in body
May 17	revised	Security concept deleted 32 characters in body
May 15	revised	Are CSRF Attacks Really Blind added 48 characters in body
May 14	revised	Are CSRF Attacks Really Blind edited body
May 13	revised	How to hide victim pop-up in clickjacking? added 120 characters in body
May 13	revised	How to hide victim pop-up in clickjacking? added 98 characters in body
May 13	revised	CSRF protection with custom headers (and without validating token) added 371 characters in body
May 10	revised	Pseudo Random Generator is not initialized from the (entropy pool)? added 1 characters in body
May 5	revised	How can I find subdomains of a site? added 43 characters in body
May 5	revised	Are phone calls on a GSM network encrypted? added 155 characters in body
May 5	revised	Are phone calls on a GSM network encrypted? added 235 characters in body
May 5	revised	Blocking network access to host(s) at the kernel level in Linux? added 71 characters in body
May 4	revised	Penetration testing Windows Phone 8 apps w/o source edited body
May 2	revised	Lessen impact of DoS attack on cpu-expensive login? added 258 characters in body
May 2	revised	Lessen impact of DoS attack on cpu-expensive login? added 248 characters in body
Apr 30	revised	Lessen impact of DoS attack on cpu-expensive login? added 63 characters in body
Apr 30	revised	Webmail host knows my password added 14 characters in body