meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 10 months |
| seen | 2 hours ago | |
| stats | profile views | 13 |
|
1h |
comment |
What method of secure erase is sufficient for MacBook Pro SSD Drives? Also, a wiping pass will not cost much in terms of drive life. The figures for 1,000,000 write life(or whatever) are for a specific bit. If you are writing all the bits on a single pass, it won't appreciably wear too many out. Wear leveling keeps the directory blocks sliding around. But you need an actual file allocating and overwriting tool, like sdelete, and not just an ordinary tool trying to wipe block after block. The concept of "block" in wear-leveling-SSD-land is not fixed in position. |
|
2h |
comment |
What method of secure erase is sufficient for MacBook Pro SSD Drives? Here is the official NIST paper on wiping various media. csrc.nist.gov/publications/nistpubs/800-88/… While it doesn't specifically mention SSDs, it does mention flash media in different forms. The value of this paper is in thinking about the value of what was on the drive compared to how you're going to dispose of it. |
|
2h |
awarded | Commentator |
|
2h |
comment |
Vulnerabilities with DB backed session tokens @Adnan, for an example of why there is concern of storing the hash, see this article on (ab)using them: offensive-security.com/metasploit-unleashed/… |
|
1d |
answered | Why is data privacy important? |
|
Jun 15 |
comment |
Why is blog spam always written so badly? @TildalWave , link spam may not contain text even remotely related to their products. Some are simply trying to establish an association between a popular site and their link farms. They understand this association can help raise their Google page rank. There is a whole "artificial web" of sites that don't serve any actual people, but the search engine spiders can't tell the difference. Essentially, they are leeching the reputation of the blogs they spam. |
|
Jun 14 |
answered | Are there any customizable vulnerability notification services? |
|
May 24 |
comment |
Definitions of computer forensics and information security Briefly, InfoSec is the preparation and maintenance of defensive measures against threats. Forensics is the investigation and response to a successful attack. A forensic investigator provides legally admissible evidence to the prosecution, and they also provide intelligence to the InfoSec teams enabling them to repair their defenses. The two fields are closely related, and it is valuable for one to understand the other. |
|
May 24 |
answered | Reason for writing Self-Decrypting Virus |
|
May 24 |
comment |
Lessons learned and misconceptions regarding encryption and cryptology This is a very misleading statement. The wording implies the reader should "trust NON-standards", which is clearly not true. Most security standards come into existence only after extensive real-world field testing. That testing is far more thorough than any single organization can generate to "prove" their non-standard system is secure. |
|
May 24 |
awarded | Critic |
|
May 24 |
comment |
Lessons learned and misconceptions regarding encryption and cryptology A "secure PRNG" could be used to generate the bits, but if it's truly secure, you still have all the distribution problems because you cannot duplicate their generation on the recipient's computer - if you could, that state would be the key, not the bits. |
|
May 24 |
comment |
Lessons learned and misconceptions regarding encryption and cryptology It's the "similarity" which leads people to make the outlandish claims of unbreakability, and it's that "efficiency" that breaks the unpredictability of the Vernam cypher. Nobody said key generation, key management, or key distribution with an OTP is easy or practical - it's none of the above. It's so hard that people still use other cyphers, despite the promise of mathematically perfect secrecy. No "key stretching" can alter that truth. |
|
May 15 |
answered | Lessons learned and misconceptions regarding encryption and cryptology |
|
May 7 |
answered | ROP Gadgets from executables? |
|
Apr 5 |
awarded | Nice Answer |
|
Apr 2 |
answered | PINsentry PRNG and Bank Cards |
|
Mar 27 |
answered | Task Manager and Keyloggers |
|
Mar 26 |
answered | Resources for building a network security curriculum |
|
Mar 25 |
answered | Software security V.S Hardware security |
