Rohan Durve - Decode141

1,141 reputation

411

bio	website	JediCorp.com/Decode141
	location	India
	age	18
visits	member for	11 months
	seen	May 4 at 14:13
stats	profile views	58

Hello there,

The essence of hacking to me is being enthusiastic about the inner workings of programmable systems or devices in-general, as opposed to just using abstracted features and facilities.#LifeHacker

I’m Rohan Durve and I go as Decode141 on the inter webs and beyond. I’m a student by day and a white-hat, web developer and a geek in-general aspiring to be a noble Information security Ninja (researcher, consultant and beyond). My current scope of non-academic work includes Pen. Testing Boxes, Exploit Development, Freelance Programming and basic Information Security Research.

My LinkedIn contains my profession history, so feel free to contact me for almost anything security related. Thanks for taking the time to read up on me, if you’ve survived that then here’s an encoded version of my email, ZEBqU3lzLm1l

	1,141 reputation	bio	website	JediCorp.com/Decode141	visits	member for	11 months
411 badges		location	India		seen	May 4 at 14:13

summary answers questions tags badges favorites bounties reputation activity

97 Actions

suggestions reviews revisions comments badges posts accepts all

Mar 27	answered	MySQL database access prevention
Mar 25	comment	What security purpose do hashes of files serve? Really? Rofl, that would end up being a recursive thing then. Signing the hash of the hash of the software.
Mar 25	answered	do different subnet masks on home network provide any security?
Mar 15	answered	Are smartphones at least as safe as “regular” computers for personal data?
Mar 6	revised	What preparation do I need to fullfil for OSCP? added 68 characters in body
Mar 6	comment	At what point does something count as 'security through obscurity'? @Ladadadada has a completely valid point. Although changing the default SSH port is a common practice to prevent automated tools, it has drawbacks. For example, inward connections to ports other than 22 may be blocked by a client-sided firewall in another corporate, etc. Apart from that, automated tools can easily be blocked out via a simple IP ban after 3 login attempts. It's not adding a new port that's hard, you need to get every employee (internal and external) familiar to it, and all this effort doesn't seem worth it.
Dec 8	answered	Scan multicast IP range on specific port using nmap
Nov 6	comment	Do VPNs provide sufficient protection over public wireless networks? ARP Spoofing to me is just another methodology to ensure MiTM Attacks, it re-directs all packets you send/receive to go through an evil host. Either case, if your VPN is doing its job right, there shouldn't be any trouble. SSL Strip and other measures can allow an evil host to get past SSL during an ARP attack tho, if you're not using better encryption (...like VPNs).
Aug 30	revised	Google Account: implications of using application-specific passwords edited body
Aug 30	revised	Google Account: implications of using application-specific passwords deleted 8 characters in body
Aug 30	comment	Google Account: implications of using application-specific passwords @drjimbob Ah, sorry edit made.
Aug 27	revised	Can Keyloggers get passwords from Windows 7/8 Logon Screen? added 73 characters in body
Aug 27	answered	Can Keyloggers get passwords from Windows 7/8 Logon Screen?
Aug 26	awarded	Constituent
Aug 14	comment	How do ASLR and DEP work? I unofficially bestow you the title of Sir Polynomial. Neat answer. xD
Aug 14	comment	Google Account: implications of using application-specific passwords Lol this Pieter dude xD. But yeah, "something" should definitely be done. I'd not expect it from Microsoft, but I lub Google!
Aug 14	comment	Google Account: implications of using application-specific passwords @Ramhound That's true, but atleast they can use that application specific password as valid only on the IMAP &SMTP, etc protocols and not all services of Google.
Aug 14	awarded	Caucus
Aug 13	comment	Google Account: implications of using application-specific passwords Yeah, I agree, thus backing my point that it is in 99% scenarios better than the single password. However being able to create application specific passwords that can only be accessed say using Outlook for IMAP would improve security. Also, I see no reason why they have to be 16 bit and lowercased.
Aug 13	comment	Is it okay for API secret to be stored in plain text or decrypt-able? Yeah, yeah! ...a missing part of the sentence caused that. I meant, "The answer is just a rough suggestion..." and was aimed at Mr. Smith. :) Ps. I didn't downvote.