Reputation
652
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 5 11
Newest
 Constituent
Impact
~33k people reached

  • 0 posts edited
  • 0 helpful flags
  • 51 votes cast
Jul
24
awarded  Constituent
Jul
20
awarded  Caucus
Jul
15
comment MITM attack between me and TOR entry node
Upvoted, but I just thought I'd add - they can see that you are using Tor (unless you take steps to prevent it, eg. using a tor 'bridge'). Don't know if this is relevant to the OP, but for some use cases it can be.
Jul
10
answered What options exist for authenticated full-disk encryption?
Jul
7
comment What options exist for authenticated full-disk encryption?
They don't authenticate the encrypted data, though. An attacker could modify the encrypted data, without knowing the decryption key, to create a specific payload in the disk image (so, for example, changing the VBR to something malicious).
Jul
5
asked Are there any products/techniques for low-effort DSL sniffing?
Jun
27
awarded  Yearling
May
10
comment What options exist for authenticated full-disk encryption?
Ideally I was asking for product recommendations. I'd also be interested to hear how such a system could be designed, though.
Apr
9
comment What options exist for authenticated full-disk encryption?
An example scenario is that I keep an encrypted disk image on a VPS, and the hosting provider is compromised, and an attacker can read and write the image. Then, I download the image, and mount it. However, an attacker has modified the image such that when I boot from the image, some kind of malware is loaded from the disk/partition boot sector prior to the OS being loaded. Does that help?
Apr
9
asked What options exist for authenticated full-disk encryption?
Apr
8
comment Strategy for encryption before cloud storage
Defining your threats is important here, as @schroeder mentioned. In particular, are you concerned about authentication of the documents? AES-CBC (for example) doesn't provide this, and it is relatively easy to tamper with encrypted files, injecting data without knowing the key used to encrypt.
Apr
4
accepted Windows Server Update Services (WSUS) - can I pivot to a client machine?
Apr
4
answered Windows Server Update Services (WSUS) - can I pivot to a client machine?
Apr
2
revised Windows Server Update Services (WSUS) - can I pivot to a client machine?
added 130 characters in body
Apr
2
asked Windows Server Update Services (WSUS) - can I pivot to a client machine?
Jul
27
comment Does a virus need to be clicked on to function?
@JamesSnell Cool. Glad you didn't take my comment the wrong way :)
Jul
27
comment Does a virus need to be clicked on to function?
I would agree with almost all of your post - but a sufficiently pedantic reader would haggle on the definition of 'virus' you (and all the other answers!) use. Strictly speaking, your answer assumes the OP meant 'virus' to include 'worm' - likely a safe assumption, but I thought it worth pointing out. While I have no solid definitions, Wikipedia's article on 'Computer Virus' seems to use the definition that a 'virus' will self-replicate and a 'worm' will 'replicate', often 'relying on security failures'. Again, not trying to be an ass here! :)
Jul
1
answered BIOS upgrade only with PGP-signature / encrypting the whole BIOS
Jun
27
awarded  Yearling
May
24
comment Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
Ah, I didn't know that Windows used file deltas as you describe. That complicates things somewhat, but you could still generate all possible file combinations and just provide a (possibly somewhat large) number of checksums. That could be the reason MS don't sign so many executables.. hrm.