1,535 reputation
11027
bio website serverfault.com
location
age 34
visits member for 4 years, 7 months
seen Mar 12 at 15:22

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Mar
6
revised Why is email being delivered normally despite an SPF “hardfail”?
added 110 characters in body
Jun
10
revised The use of the underscore in host names
deleted 19 characters in body
Mar
1
revised DNS Lookup to Bind config file
added 30 characters in body
Mar
1
revised DNS Lookup to Bind config file
added 100 characters in body
Nov
17
revised I just did a chmod -x chmod
edited tags
Aug
27
revised Break into Windows 7?
edited tags
Aug
27
revised Break into Windows 7?
added 114 characters in body; added 42 characters in body; added 61 characters in body
Aug
6
revised keylogger security
added 39 characters in body
Aug
6
revised keylogger security
deleted 5 characters in body
Aug
6
revised keylogger security
deleted 126 characters in body; deleted 42 characters in body
Jul
11
revised What are known vulnerabilities of out-of-the-box Debian 5.0.5 fresh installed system?
deleted 151 characters in body
Jun
24
revised My site seems to be hijacked… but only when visited from another site… how?
added 2 characters in body
Jun
14
revised compromised site
added 153 characters in body; added 2 characters in body; added 6 characters in body
Jun
4
revised What is the best Solid State File System (SSDFS) for Linux?
added 1 characters in body
May
15
revised Attack from anonymous proxy
added 297 characters in body
May
14
revised http compression shared hosting apache/php
added 405 characters in body; added 3 characters in body
May
3
revised E-mail sent with postfix are marked as spam
added 72 characters in body; added 8 characters in body
May
3
revised E-mail sent with postfix are marked as spam
added 31 characters in body; deleted 31 characters in body
Apr
3
revised E-mail sent with postfix are marked as spam
edited title
Apr
3
revised E-mail sent with postfix are marked as spam
edited title; added 38 characters in body; added 9 characters in body