1,560 reputation
11028
bio website serverfault.com
location
age 34
visits member for 4 years, 11 months
seen Dec 1 at 21:15

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


75
× 59
4
2
× 2
2
16
4
2
× 2
2
16
4
2
2
16
3
× 4
2
2
13
× 20
3
× 2
2
1
× 2
9
× 4
3
× 2
2
1
× 2
8
× 4
3
2
1
× 2
7
× 2
3
2
1
× 2
5
× 10
3
2
1
5
× 7
2
× 5
2
1
5
2
× 4
2
1
5
2
× 4
2
1
4
× 4
2
× 2
2
1