9,024 reputation
21558
bio website
location The Netherlands
age
visits member for 3 years, 1 month
seen 14 hours ago

Student; manufactured 2 decades ago; interested in computer security and software engineering.


Apr
5
comment Is Telegram secure?
In short, I'd say nothing is secure that works as easy as Telegram, WhatsApp, Skype, BlackBerry, etc. All of those (except WhatsApp) have promised end to end encryption, and so far only Telegram is not known to hand over their encryption keys to governments, simply because they are not big enough yet. Somehow Microsoft and Blackberry made it possible to break their own security and provide India and the United Arab Emirates with some plaintext. I wouldn't put it past any app to do this. For real security, use trusted tools like PGP/GPG or OTR.
Apr
5
comment Is Telegram secure?
Reiterates lots of the criticism, but so far I have yet to hear a non-theoretical vulnerability. Can anyone read encrypted messages as they go over the wire, change contents without the other party noticing (even if the attacker doesn't know what the decrypted output will be), or spoof the sender? If not, I don't see a problem with this self-designed protocol. All protocols have been designed by one team or another at some point.
Apr
4
reviewed Approve How does a country block its citizens from accessing a site?
Apr
3
comment Security of a Windows XP system after April 8th when running the latest Firefox or Chrome
"XP has had enough holes over the years that it's hard to imagine there aren't some un-found holes in what remains." I understand that, but you'll need to somehow reach the system to exploit it. So if the browser is the only way, and it's a modern and up-to-date browser... That's what I'm asking about. "an installation of linux" I've thought of that, but Windows 8 on her work laptop is a huge change already. I'll use this as a last resort. Thanks for the suggestion though!
Apr
3
comment Security of a Windows XP system after April 8th when running the latest Firefox or Chrome
Third party anti-virus already installed for the same reason as a third-party browser. EMET may be a good idea though, thanks!
Apr
2
asked Security of a Windows XP system after April 8th when running the latest Firefox or Chrome
Mar
31
reviewed Approve Do non-keyboard characters make my password less susceptible to brute forcing?
Mar
28
reviewed Approve How do I use a TPM to protect my BIOS/EFI from “remote” attacks
Mar
27
reviewed Approve wcf tag wiki excerpt
Mar
26
reviewed Reject Why should I care if a site uses encryption or not if I'm not exchanging any sensitive data?
Mar
24
reviewed Approve Malicious code in image. Harmful?
Mar
24
reviewed Approve Getting exploit reliability when using the off by one framepointer overwrite on linux
Mar
24
reviewed Approve How to get MAC addresses of devices which are not in the network
Mar
21
comment How does SSL/TLS work?
@RosdiKasim Yes, you can do that easily. Data is unencrypted and can be manipulated until right before it is transmitted. That's the risk behind installing plugins. Rogue plugins are basically the same as running a virus with user (non-adminstrator) permissions: it may be confined to your user account, but it can still log all your keys (keylogger). In the case of a browser plugin it is confined to your browser, but it can still get all website's data (including passwords when you type them in).
Mar
19
comment Finding Hidden Keylogger Through Forcing a Computation Error
"Maybe this is something a bit higher than what most people on this site are able to answer" Honestly I think it's more beyond your comprehension, not the people on this site. It was a good laugh though to read you filming a screen at 16k fps when it only refreshes 60-120 times a second. Edit: Also to answer your question: 1. you can tap a line without slowing it down, and 2. you can do software keyloggers without introducing delay since you read the key after-the-fact instead of intercepting it (sudo cat /dev/input/*).
Mar
18
comment How safe is SSL?
TL;DR: yes it is all encrypted and secure. Even if it wasn't, there is nothing you can do about it. Adding hashing via javascript adds no security to https.
Mar
18
revised How safe is SSL?
Removed unnecessary markup, fixed typos
Mar
17
comment Why warning sign when visiting https-website?
It's a lengthy piece, but the answer is in here: security.stackexchange.com/a/20833/10863. Under the section "How to crack SSL," subsection "in detail," paragraph 2, it is explained what causes this warning sign.
Mar
13
reviewed Approve Would using Google reCAPTCHA allow Google to cheat?
Mar
12
comment Why am I allowed to access protected Windows files when I boot Ubuntu from USB?
@Emmet Yeah, very clever.