meta user
network profile
| bio | website | |
|---|---|---|
| location | Switzerland | |
| age | 25 | |
| visits | member for | 2 years, 6 months |
| seen | Sep 13 '12 at 8:51 | |
| stats | profile views | 29 |
|
Mar 18 |
awarded | Nice Answer |
|
Jan 1 |
awarded | Good Question |
|
Nov 12 |
awarded | Yearling |
|
Oct 17 |
awarded | Notable Question |
|
Feb 17 |
answered | URL redirection vulnerability |
|
Feb 17 |
comment |
Removing Google Analytics cookie string from URL - security hole? I don't think you introduce a new vulnerability here. Twitter had the problem because they took the part after the hash, so the browser could be tricked to execute javascript. Since you take the part before the hash, an attacker can't trick a browser into executing javascript on the page. |
|
Feb 17 |
comment |
Is “untrusted code” reported by DOM Snitch a vulnerability? Now that's funny. DOM Snitch is calling itself "untrusted code"? But I guess this makes sense, since it doesn't originate fro the same origin as the page itself. But as George said, it doesn't create a vulnerability, it just reports a possible vulnerability. |
|
Feb 16 |
answered | Is “untrusted code” reported by DOM Snitch a vulnerability? |
|
Feb 16 |
answered | Removing Google Analytics cookie string from URL - security hole? |
|
Feb 7 |
comment |
Getting a Root CA accepted in systems and browsers And there are apparently around 650 certificate authorities trusted by Windows/Firefox... (includes a nice map) |
|
Feb 7 |
answered | Getting a Root CA accepted in systems and browsers |
|
Jan 31 |
awarded | Analytical |
|
Jan 31 |
answered | Robots.txt security strategy? |
|
Dec 14 |
awarded | Nice Answer |
|
Nov 12 |
awarded | Yearling |
|
Sep 13 |
awarded | Nice Question |
|
Sep 2 |
answered | How does Convergence (CA replacement) prevent its notaries from being MITM'd as well? |
|
Aug 11 |
awarded | Popular Question |
|
Jun 13 |
awarded | Nice Question |
|
Mar 4 |
answered | Why do we authenticate by prompting a user to enter both username and password? Does prompting the password only suffice? |
