1,490 reputation
716
bio website
location Switzerland
age 26
visits member for 3 years, 10 months
seen Jul 26 '13 at 9:09

1d
awarded  Explainer
Nov
12
awarded  Yearling
Aug
30
awarded  Enlightened
Aug
30
awarded  Nice Answer
Mar
18
awarded  Nice Answer
Jan
1
awarded  Good Question
Nov
12
awarded  Yearling
Oct
17
awarded  Notable Question
Feb
17
answered URL redirection vulnerability
Feb
17
comment Removing Google Analytics cookie string from URL - security hole?
I don't think you introduce a new vulnerability here. Twitter had the problem because they took the part after the hash, so the browser could be tricked to execute javascript. Since you take the part before the hash, an attacker can't trick a browser into executing javascript on the page.
Feb
17
comment Is “untrusted code” reported by DOM Snitch a vulnerability?
Now that's funny. DOM Snitch is calling itself "untrusted code"? But I guess this makes sense, since it doesn't originate fro the same origin as the page itself. But as George said, it doesn't create a vulnerability, it just reports a possible vulnerability.
Feb
16
answered Is “untrusted code” reported by DOM Snitch a vulnerability?
Feb
16
answered Removing Google Analytics cookie string from URL - security hole?
Feb
7
comment Getting a Root CA accepted in systems and browsers
And there are apparently around 650 certificate authorities trusted by Windows/Firefox... (includes a nice map)
Feb
7
answered Getting a Root CA accepted in systems and browsers
Jan
31
awarded  Analytical
Jan
31
answered Robots.txt security strategy?
Dec
14
awarded  Nice Answer
Nov
12
awarded  Yearling
Sep
13
awarded  Nice Question