Web security researcher specialized in discovery and exploitation of HTML5 vulnerabilities. Author of a few recognized HTML5/UI redressing attack vectors.
Solid web application development background in creating secure e-commerce systems, intranet and social networking applications.
Contributes to various open-source projects and also develops his own open-source solutions (just google "ohloh koto").
Speaker at IT security conferences, OWASP and Tech Krakspot meetings.
Top network posts
- 22CRIME - How to beat the BEAST successor?
- 19Why don't we use MAC address instead of IP address?
- 18If a website allows another person to get a list of the site's users passwords, how likely is it that the passwords are stored in cleartext?
- 17How secure is asking for specific characters of passwords instead of the entire thing?
- 16Is strip_tags() horribly unsafe?
- 13Is this jQuery ajax call vulnerable to XSS?
- 12Is it safe to store and replay user-provided mime types?
- View more network posts →
Keeping a low profile.
This user hasn't posted... yet.