Skip to main content
Information Security
Krzysztof Kotowicz's user avatar
Krzysztof Kotowicz's user avatar
Krzysztof Kotowicz's user avatar
Krzysztof Kotowicz
  • Member for 13 years, 5 months
  • Last seen more than 9 years ago
Profile Activity
Stats
4,098
reputation
418k
reached
42
answers
0
questions
Communities
View all
About

Web security researcher specialized in discovery and exploitation of HTML5 vulnerabilities. Author of a few recognized HTML5/UI redressing attack vectors.

Solid web application development background in creating secure e-commerce systems, intranet and social networking applications.

Contributes to various open-source projects and also develops his own open-source solutions (just google "ohloh koto").

Speaker at IT security conferences, OWASP and Tech Krakspot meetings.

Badges
View all badges
This user doesn’t have any gold badges yet.
22
silver badges
30
bronze badges
Top tags
View all tags
68
Score
9
Posts
21
Posts %
68
Score
8
Posts
19
Posts %
67
Score
3
Posts
7
Posts %
53
Score
5
Posts
12
Posts %
40
Score
4
Posts
10
Posts %
36
Score
3
Posts
7
Posts %
Top posts
View all questions and answers
answer
39
How secure is asking for specific characters of passwords instead of the entire thing?
Sep 23, 2011
answer
30
CRIME - How to beat the BEAST successor?
Sep 11, 2012
answer
21
If a website allows another person to get a list of the site's users passwords, how likely is it that the passwords are stored in cleartext?
Sep 28, 2011
answer
19
Why don't we use MAC address instead of IP address?
Dec 26, 2011
answer
17
Is strip_tags() horribly unsafe?
Dec 23, 2011
answer
14
Is this jQuery ajax call vulnerable to XSS?
Jan 19, 2012
answer
14
Implications of Trace/Track Methods on Apache
Sep 29, 2011
answer
13
Is it safe to store and replay user-provided mime types?
Nov 3, 2011
answer
12
Is it safe to serve any user uploaded file under only white-listed MIME content types?
Feb 15, 2012
answer
10
What is a Flash drive by download?
Sep 18, 2011