340 reputation
210
bio website
location
age
visits member for 1 year, 9 months
seen Jan 5 at 17:53

Jan
5
comment What kinds of encryption are _not_ breakable via Quantum Computers?
Thanks for correcting me. This is very exciting, do you have a link that explains this more in-depth?
Jan
3
comment What kinds of encryption are _not_ breakable via Quantum Computers?
Quantum computers are still a ways off. The concept relies on using bits, that when unobserved, are both 1 and 0 and so able to calculate with all the values that can be represented in the given space -- with one calculation. As romantic as this sounds, I have yet to hear of a way to calculate with this bits while leaving them unobserved.
Jan
26
comment Can law enforcement track a criminal through dynamic IP address?
As far as I know the police are generally incompetent at comparing dynamic IPs with an ISPs logs of who they belonged to at the time. Depending on your configuration you may be able to wait for your computer to come online, then access its remotely
Jan
26
comment Can wiped SSD data be recovered?
In some ways yes: Data is not always overwritten, In other ways no: Due to garbage collection on modern SSDs the longer a drive is in use the harder it will be to locate and read the data.
Jan
26
comment How to lure a Hacker?
If you suspect an intruder a review of your relevant logs will provide all the info you need/can get
Dec
4
comment Would publishing a network diagram make the network less secure?
It wont make it 'more possible' to breach a network, however, it will make it much faster.
Oct
26
comment Parabolic Denial Of Service — Would it work?
Could this be used to even greater effect with multicast?
Oct
26
comment using network switches to prevent malicious promiscuous mode usage
I like this answer. I would like to add a note about IDS though. If op is concerned enough about active sniffing using an IDS is a must. They will be able to detect exactly this sort of behavior, responding accordingly.
Oct
5
comment L2TP/IPsec shared secret: Can it be public?
IPSec is (usually) a dedicate box between users and the net that uses a shared secrete to encrypt/decrypt
Oct
5
comment can vps be made as secure as having two dedicated server computers?
Yes, please do make your poster clearer. I would also say VM is going to be your best bet. Even if the instance is compromised it would take specific mal-ware to access the box.
Oct
3
comment Nexus 7 (Or any other good android tablets) For pen testing
Portability / Social engineering -- a lot more suspicious to be typing away at a laptop
Oct
3
comment Does Username + Password + Pin improve login security?
your right, I should have mentioned that. I would add that requiring the user to included 4 numbers also boosts security
Oct
2
comment How can I decode a message that was encrypted with a one-time pad?
One time pads can be "decrypted" into anything, making them unbreakable. They are used by sovereign head of states (including USA) to communicate. Their one "vulnerability" is distribution of the key.
Oct
1
comment Ettercap (dns_spoof)
there is a lag till I can
Sep
29
comment IP attack by reading/writing data?
Your right, my bad. I should have paid closer attention.
Sep
28
comment Should ettercap make the targets this slow?
Two things: a) I was streaming music at the time, when I stopped the targets were able to communicate. And b) Dont I want to be able to drop packet and wont enabling ip forwarding remove the capability?
Sep
25
comment Should ettercap make the targets this slow?
all I can think is maybe the system api lib-net uses have been deliberately throttled. Would using an eternal adapter help?
Sep
21
comment How secure is this login page?
thanks, I know the question sucked, I will have to do some more research on this.
Sep
19
comment How secure is this login page?
ok, its not the best question. But is does address a point: is a page secure without SSL?
Jul
10
comment How should I tell an organisation that they are vulnerable when I wasn't given permission to check?
It does not like theses people attempted any security -- just send them an email.