Rook

less info
meta site favicon meta user | stack exchange network profile network profile
21,826 reputation
12073
bio website stachliu.com
location
age
visits member for 2 years, 5 months
seen 5 hours ago
stats profile views 1,179

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


468 Answers

newest activity votes
7
Why would the browser present the certificate for an unknown outside site?
dec 22 '11 at 4:42
7
Why do we even use passwords / passphrases next to biometrics?
aug 17 '11 at 16:55
7
How do I secure my SaaS startup?
mar 6 '11 at 7:14
7
Did someone really plug an iphone in, or are these symptoms of an exploit attempt?
may 18 '11 at 18:39
7
Can you secure a web app from FireSheep without using SSL?
jan 7 '11 at 19:22
6
User entered Javascript security implications
may 18 at 19:04
6
Is it possible for a hacker to download a php file without executing it first?
may 8 at 2:19
6
What should I look for when auditing a Browser extension / plugin?
mar 11 at 17:11
6
What should a security audit report include?
jan 24 at 16:24
6
Comparsion Between AppArmor and Selinux
jan 20 at 18:11
6
Preventing insecure webapp on subdomain compromise security of main webapp
nov 18 at 20:24
6
Should we force user to HTTPS on website?
nov 5 at 16:55
6
SSL decryption in Wireshark
sep 27 at 20:53
6
Vulnerable java applications
sep 12 at 16:30
6
Ethical Hacking - Penetration Testing Book(s)
aug 8 at 7:32
6
What CVE identifier will follow after CVE-2012-9999?
aug 5 at 19:17
6
Is it worth the effort to store FTP passwords encrypted?
jul 17 '12 at 18:09
6
What not to reveal of OS configuration
jul 7 '12 at 18:23
6
How secure is the apt-get install command against man in the middle attacks
dec 27 '11 at 2:59
6
Are the SSL Digital Security Certifiactes based on Kerberos Network Security Protocol
dec 14 '11 at 7:25
6
Can too much web searching be a danger to a security professional?
dec 9 '11 at 2:08
6
Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
dec 6 '11 at 18:59
6
SQL injection — but why isn't escape quotes safe anymore?
may 7 '11 at 20:25
6
vt-d Virtualisation and Trusted Execution Technology
may 2 '11 at 18:31
6
What is more secure: Many subdirectories, or many subdomains?
apr 13 '11 at 21:13
6
Encrypting with Mongo
apr 11 '11 at 16:55
6
How should passwords be stored if they must be recoverable?
apr 10 '11 at 1:06
5
What are Non-linear/backward overwrites?
jun 5 at 5:38
5
Pseudo Random Generator is not initialized from the (entropy pool)?
apr 29 '12 at 6:58
5
Defense against same origin attacks?
mar 24 at 16:46
1 2 3 4 5 … 16