337 reputation
38
bio website github.com/tangrs
location
age
visits member for 2 years, 7 months
seen 19 hours ago

Mar
23
comment Can a Trojan hide itself, so its activity doesn't appear in task manager process?
Short answer: yes.
Mar
4
awarded  Notable Question
Mar
4
awarded  Good Question
Mar
3
awarded  Yearling
Mar
3
awarded  Nice Question
Mar
3
accepted How does Android L achieve strong encryption with a low entropy passphrase?
Mar
3
awarded  Popular Question
Mar
3
asked How does Android L achieve strong encryption with a low entropy passphrase?
Feb
25
comment How to perform safe authentication via HTTP?
@Aurangzeb Yes, but that someone shouldn't be everyone between you and the server. If we could trust them, we wouldn't need SSL/TLS now would we? The attack I'm talking about is the one the Tunisian government used to compromise Facebook logins by injecting Javascript into the insecure login page that sends off login details to a 3rd party before it was posted to a secure login page.
Feb
25
awarded  Commentator
Feb
25
comment How to perform safe authentication via HTTP?
What would stop a man-in-the-middle attack that serves the client a bogus version of jCryption that sends off the password to a 3rd party?
Jan
8
comment Is it possible to hide behind a hostname to purposefully effect SEO?
Whoa, slow down. What problem are you exactly facing? What makes you think Google has penalised you? cum hoc ergo propter hoc
Dec
3
comment What is the shortest malicious XSS possible?
This sounds perfect for the Code Golf SE
Nov
28
awarded  Scholar
Nov
28
accepted Should a 2FA recovery key be stored along with a password?
Nov
24
awarded  Student
Nov
24
asked Should a 2FA recovery key be stored along with a password?
Nov
11
comment JavaScript Injection using Man in the Middle Attack
Download a copy of MITM Proxy and have a play around. Modifying traffic is done on-the-fly.
Oct
25
comment Protecting a document that you sell
Without this turning into an anti-DRM argument, the only real way of preventing piracy is to make buying the document or book more appealing than pirating it in my opinion. If you do decide to go with rolling your own DRM, keep in mind that you're probably going to end up doing 80% of the work preventing 20% of your readers from pirating.
Oct
25
comment Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk
There is no upper limit. If the password is chosen properly, you'll practically never find it (given no implementation or cryptographic flaws). Furthermore, I don't think I've read anything that suggests that any part of WPA2 is vulnerable to a birthday attack or even that the birthday attack is applicable here (it seems to be only used to find collisions in hashes and digital signatures).