30,494 reputation
23277
bio website
location Troy, NY
age 30
visits member for 2 years, 3 months
seen 7 hours ago

Nov
10
reviewed Close HTTP attack taking down PHP-FPM
Nov
10
reviewed Leave Open Looking for [intentionally made] vulnerable applications suitable for practicing different penetration techniques (NOT a web apps, user side ones)
Nov
7
comment Hashing a hard drive before shutdown
@Jonathan - yes, the OPs entire premise was to store the hash to a USB stick. Basically he wants to be able to have something small that he can keep with him to be able to verify that another drive hasn't been tampered with. Encryption is really irrelevant since he wants to assume that the key is compromised.
Nov
7
reviewed Close Send fake response(?packets) to a program
Nov
7
reviewed Close How to restore devices like IP phones to productive use after unexplained activity?
Nov
7
reviewed Close Why do some known vulnerabilities have no CVE ID?
Nov
7
reviewed Leave Open What is the difference between OWASP PHPSEC and PHP-ESAPI?
Nov
7
reviewed Close start point into cryptography and encryption
Nov
6
reviewed Leave Open Wifi - Can you be traced?
Nov
6
revised Hashing a hard drive before shutdown
added 301 characters in body
Nov
6
comment Hashing a hard drive before shutdown
HDDs have firmware that governs how they operate. Someone could flash an alternate firmware that would mask their changes and tweak data in flight after verification. This could allow them to, say, alter an executable being loaded to turn it in to a root kit that would alter the behavior of your mounting, so you'd have to be very careful of how you mounted to prevent tampering from the HDD firmware. I don't know of anything that handles this kind of threat model as most models are built around the idea that a lost key is a broken system, rendering most of these concerns far less necessary.
Nov
6
revised Hashing a hard drive before shutdown
added 246 characters in body
Nov
6
comment Hashing a hard drive before shutdown
@JayHolister - yeah, individual file hashes would work, but now you need a much larger amount of data on the USB stick and probably some specialized mounting to verify it. You also have to be careful with how you mount the drive to make sure that the attacker can't use it to launch any attack on your system that would allow it to mask changes they made.
Nov
6
revised Hashing a hard drive before shutdown
added 161 characters in body
Nov
6
revised Hashing a hard drive before shutdown
added 159 characters in body
Nov
6
reviewed Close Site allows both Partial and Complete password authentication; do they have my password in plain text?
Nov
6
reviewed Close How to prevent users from booting at safe mode
Nov
6
reviewed Close How Secure are Virtual Networks
Nov
6
revised Hashing a hard drive before shutdown
added 364 characters in body
Nov
6
answered Hashing a hard drive before shutdown