267 reputation
17
bio website facebook.com/meplot
location
age
visits member for 3 years
seen 45 mins ago

I like to make compilers cry. Expecially the C# ones...


Jun
10
comment Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?
The question is mostly interested in knowing whether an attacker's AP can fool clients even if the attacker doesn't know the PSK
Apr
15
awarded  Autobiographer
Feb
15
comment Securely identify clients by web app
Complicated? Why so?
Feb
14
comment Securely identify clients by web app
TLS with client certs?
Feb
14
comment Securely identify clients by web app
How about creating a "trusted" VPN, that only S and A1/2 can access, with forced IPs?
Feb
12
comment Securely identify clients by web app
Who controls the VPN?
Feb
7
comment How do I know if root account has been compromised?
Install an identical system, physically mount both hdds on a system, check for differences
Jan
29
answered concrete real-life examples where grsecurity prevented an exploit
Jan
23
comment Linux Repo Security
No need to replace libc. It just needs to write a suid somewhere =)
Dec
15
revised Distance between two passwords
Formatting
Dec
15
suggested approved edit on Distance between two passwords
Nov
24
answered MITM on program with no proxy settings
Sep
4
comment Preventing/Detecting forgery of logs generated in a potentially hostile environment
Honestly I think the first sentence says it all. If the machine isn't trusted it isn't trusted. Crypto is no fairy dust
Jul
23
awarded  Critic
Jul
7
awarded  Yearling
Jul
4
revised Data anonymization/ encryption requirement
added 236 characters in body
Jul
4
comment Data anonymization/ encryption requirement
The only way you could do that is by cracking the AES key, which is infeasible
Jul
3
answered Data anonymization/ encryption requirement
Jun
12
comment Avoiding Replay Attacks on Lightweight Channel
Because otherwise you cannot detect packets dropped by an attacker
May
29
revised How Safe Are Encrypted Websites Really?
My point was the connection should be HTTPS