284 reputation
29
bio website
location
age
visits member for 2 years, 3 months
seen Dec 6 at 22:46

Nov
27
comment Risk when attacker has only physical access to a computer's USB port
And no, you don't need a custom device. You can modify the firmware on some usual usb flash devices. Just search for BadUSB.
Nov
27
comment Risk when attacker has only physical access to a computer's USB port
Just stick a custom flash device into the port that tells the computer "I'm a hub, and a keyboard & flash memory device are attached here", let your "keyboard", send some key combinations to run software from the memory...
Nov
27
comment typical request, what type of encryption is this?
Sure, but for someone that is not familiar with IT-Sec, a hash is just a form of encryption. Yes, there is a difference (you can't decrypt it), but that is not important here.
Nov
27
comment typical request, what type of encryption is this?
He basically asks what hashing algorithm is used, so he can replace the passwords with new ones.
Nov
17
comment Tell people that I can encrypt emails
Just to be curios, shouldn't it be possible to add the PGP version as alternative, instead of multipart? (Or cann't outlook handle this correctly?)
Nov
9
comment Is this somebody trying to exploit a vulnerability?
maybe someone implemented the cookie jar in a wrong way?
Nov
9
awarded  Informed
Nov
9
awarded  Citizen Patrol
Oct
2
comment Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
I didn't even know about schroot, so I probably wouldn't have found that.
Oct
1
comment Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
@ninjalj Interesting. I currently don't have the time or environment to create a test for this, so I wonder if system from an SUID binary can result in this bug.
Sep
30
awarded  Enlightened
Sep
30
awarded  Nice Answer
Sep
29
comment Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
the ability to hide full paths is afaik considered a bug and removed with some patches.
Sep
27
awarded  Yearling
Sep
26
revised Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
added 335 characters in body
Sep
25
revised Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
added 159 characters in body
Sep
25
answered Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
Sep
24
awarded  Autobiographer
Jan
3
comment iptables: plaintext password protection
Bad idea. A script can try to send all possible combinations of your password to a server. The missing password is yours.
Dec
30
comment Can malicious code be contained outside the filesystem on a USB drive?
Yes