303 reputation
18
bio website owlfolio.org
location Pittsburgh, PA
age 37
visits member for 4 years, 4 months
seen yesterday

Hello, my name is Zachary Weinberg. I go by “Zack,” except on paper. Pleased to meet you.

I’m about thirty-five years old, and I grew up in the suburbs of Los Angeles, California. I do computer security research at CMU.

I AM NOT LOOKING FOR A JOB. DO NOT CONTACT ME WITH ANY SORT OF JOB OFFER. I regret the bluntness and ALLCAPSNESS of the previous statement, but this account has become a principal source of the recruitment spam I get, and anything short of a flat-out upfront NO is completely ineffective. *waves old man cane at clouds*


Mar
18
comment Does this image contain secret data?
Also, they appear to be in an ascending sequence. Does that continue throughout? If you take the numeric difference between pairs of numbers, does that reveal a pattern?
Mar
18
comment Does this image contain secret data?
Those are clearly 128-bit hexadecimal numbers. Concatenate them, convert them to binary, and run the result through a standard compression algorithm (e.g. gzip). How much smaller is the result, relative to the uncompressed version? (It's important that you convert to binary else you will only measure gzip's ability to compensate for hexadecimal coding overhead.)
Nov
30
awarded  Scholar
Nov
30
comment Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?
This is the pedantic, standard-citing answer I was looking for. Thank you.
Nov
30
accepted Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?
Nov
26
awarded  Student
Nov
26
revised Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?
clarify scenario under discussion
Nov
26
asked Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?
Aug
4
awarded  Editor
Aug
4
revised How does a country block/censor an encrypted website (HTTPS)?
deleted 31 characters in body
Aug
4
awarded  Nice Answer
Aug
4
awarded  Yearling
Aug
4
awarded  Teacher
Aug
3
answered How does a country block/censor an encrypted website (HTTPS)?
Dec
18
comment Is my developer's home-brew password security right or wrong, and why?
In addition to what has already been said, I'd point out that published algorithms are designed to remain secure even though they have been published. That means they have to be better than algorithms that can rely on the adversary not knowing how they work.
Dec
16
comment Practical DRM for pdfs
I only mean to suggest that this is a question you should be asking your client.
Dec
15
comment Practical DRM for pdfs
Why does the org wish these useful procedures not to be shared? Ceteris paribus, it seems that they should be shared.
Dec
15
awarded  Peer Pressure
Nov
12
awarded  Supporter
Nov
11
awarded  Autobiographer