23,775 reputation
755113
bio website infosecstudent.com
location Singapore
age 19
visits member for 2 years, 2 months
seen 2 hours ago

Currently a student studying IT security.


Jul
25
comment Is there something similar to pseudorandom generators but in the opposite direction?
A hash function?
Jul
13
comment Reversible Hash Function?
If it's reversible it isn't a hash.
Jul
8
comment Why does printf() vulnerability require 4-bytes of junk data? - “Hacking: The Art of Exploitation”
possible duplicate of Why does printf() vulnerability require 4-bytes of junk data? - "Hacking: The Art of Exploitation"
Jul
6
comment Protocols equivalent to TLS?
SSH can be a potential alternative depending on the circumstances.
Jun
17
comment Is using Git for deploying a bad practice?
@pedromanoel I subscribe to the school of thought where anything you push to master should be production ready so that shouldn't really be a concern. What you are suggesting works as well.
Jun
4
comment How common and how easy is sniffing plaintext communication?
Connect to a open wifi network, run wireshark and see for yourself.
Jun
3
comment What are the advantages/disadvatages of hashing over encryption?
There is no "advantage". They serve completely different purposes.
May
27
comment Do firewalls always run in userspace?
To nitpick, iptables is actually the userspace interface to the kernel's Netfilter framework.
May
11
comment Is breaking a looping one-time pad practical? If so, how?
@HelloWorld Yes.
May
5
comment Open Source OS - code you see vs code you get
@JamesC Sorry, not particular sure about Tails OS. I'm sure it's documented somewhere it they are indeed using a deterministic build though.
May
2
comment Secure and fast communication between 2 VM's
@Jdeboer You need to develop a threat model so you know exactly what you want to protect against. Ok, you are using cloud instances. In that case I would encrypt the data instead of relying on the service provider for anything. Many databases like MySQL offers connections over SSL. Is that an option?
May
1
comment Whenever an unhandled exception somehow makes it into production, is it safe, viable, etc. to print an encrypted stack trace to the end user?
@Panzercrisis Think javascript-heavy web apps where application logic lives on the client instead of the server.
Apr
27
comment Fomat String vulnerability used to display data outside the function stack frame?
@AbbasJavan Think about what a stack frame actually is. In x86-speak, it is the part of the stack between the esp and ebp. You can still read from outside the stack frame.
Apr
23
comment How do big companies ensure that other people don't register a new top level domain with their name?
Google employs thousands of people sitting in front of computers whose sole job is snatching up domain names when they become available.
Apr
22
comment How different should passwords be?
1. You should not generated passwords ONLINE. This doesn't mean that you shouldn't generate passwords locally on your computer.... 2. Yes, it's called keepass and dropbox.
Apr
22
comment How different should passwords be?
@Celeritas Password managers.....
Apr
20
comment Length-constant password comparison in scrypt?
And which part of the accepted answer isn't clear? No, timing attacks aren't really relevant to hashing.
Apr
11
comment Is there any point in using 'strong' passwords?
@Pacerier security.stackexchange.com/a/31846/10211
Apr
5
comment Is Telegram secure?
@Luc I really wish I can downvote comments. Really? Non-standard crypto doesn't make you nervous? Do you want to encourage people to use crypto protocols without strong theoretical foundations? What happens when adoption reaches critical mass and a serious vulnerability is found? Yes, protocols need to be designed by people. But the people designing them should be trained cryptographers and the protocol needs to be peer reviewed by other trained cryptographers.
Apr
4
comment Is Telegram secure?
"A non-standard crypto is not necesarilly less secure." Every single respectable cryptographer in the world will disagree with you.