637 reputation
1310
bio website
location
age
visits member for 2 years, 11 months
seen 19 hours ago

May
10
comment What options exist for authenticated full-disk encryption?
Ideally I was asking for product recommendations. I'd also be interested to hear how such a system could be designed, though.
Apr
9
comment What options exist for authenticated full-disk encryption?
An example scenario is that I keep an encrypted disk image on a VPS, and the hosting provider is compromised, and an attacker can read and write the image. Then, I download the image, and mount it. However, an attacker has modified the image such that when I boot from the image, some kind of malware is loaded from the disk/partition boot sector prior to the OS being loaded. Does that help?
Apr
9
asked What options exist for authenticated full-disk encryption?
Apr
8
comment Strategy for encryption before cloud storage
Defining your threats is important here, as @schroeder mentioned. In particular, are you concerned about authentication of the documents? AES-CBC (for example) doesn't provide this, and it is relatively easy to tamper with encrypted files, injecting data without knowing the key used to encrypt.
Apr
4
accepted Windows Server Update Services (WSUS) - can I pivot to a client machine?
Apr
4
answered Windows Server Update Services (WSUS) - can I pivot to a client machine?
Apr
2
revised Windows Server Update Services (WSUS) - can I pivot to a client machine?
added 130 characters in body
Apr
2
asked Windows Server Update Services (WSUS) - can I pivot to a client machine?
Jul
27
comment Does a virus need to be clicked on to function?
@JamesSnell Cool. Glad you didn't take my comment the wrong way :)
Jul
27
comment Does a virus need to be clicked on to function?
I would agree with almost all of your post - but a sufficiently pedantic reader would haggle on the definition of 'virus' you (and all the other answers!) use. Strictly speaking, your answer assumes the OP meant 'virus' to include 'worm' - likely a safe assumption, but I thought it worth pointing out. While I have no solid definitions, Wikipedia's article on 'Computer Virus' seems to use the definition that a 'virus' will self-replicate and a 'worm' will 'replicate', often 'relying on security failures'. Again, not trying to be an ass here! :)
Jul
1
answered BIOS upgrade only with PGP-signature / encrypting the whole BIOS
Jun
27
awarded  Yearling
May
24
comment Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
Ah, I didn't know that Windows used file deltas as you describe. That complicates things somewhat, but you could still generate all possible file combinations and just provide a (possibly somewhat large) number of checksums. That could be the reason MS don't sign so many executables.. hrm.
May
23
comment Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
@schroeder - Yes, checksums would need to be supplied for updates also.
May
23
awarded  Commentator
May
23
comment Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
@Steve - I mean the windows PE signatures that the kernel uses to load modules. I know they aren't present in that format because I can't verify them.
May
22
asked Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
Mar
26
comment Using pattern matching to make a port more secure
Something like this en.wikipedia.org/wiki/Port_knocking? Or are you trying to fingerprint browsers, a la detectright.com ?
Mar
24
answered Is compiling source code from github a big security risk?
Mar
22
answered Outbound DDOS attack from a centos server