1,530 reputation
11027
bio website serverfault.com
location
age 34
visits member for 4 years, 6 months
seen Mar 12 at 15:22

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Jul
2
awarded  Curious
Jun
21
awarded  Nice Question
Apr
28
awarded  Famous Question
Mar
12
accepted Why is email being delivered normally despite an SPF “hardfail”?
Mar
10
awarded  Popular Question
Mar
7
comment Why is email being delivered normally despite an SPF “hardfail”?
Outlook.com is more lenient. I haven't heard of DMARC, that is interesting.
Mar
6
revised Why is email being delivered normally despite an SPF “hardfail”?
added 110 characters in body
Mar
6
asked Why is email being delivered normally despite an SPF “hardfail”?
Feb
8
awarded  Popular Question
Jan
5
awarded  Yearling
May
3
awarded  Popular Question
Apr
21
awarded  Notable Question
Mar
19
awarded  Popular Question
Jan
5
awarded  Yearling
Dec
26
awarded  Notable Question
Oct
25
awarded  Notable Question
Aug
9
awarded  Notable Question
Jul
26
comment How to have better mysqld reliability in EC2?
-1 massive security risk.
Jul
15
awarded  Notable Question
Jun
10
comment The use of the underscore in host names
@Ward well they might be used for some strange windows/android voodoo...