Reputation
294
Top tag
Next privilege 300 Rep.
Create new tags
Badges
3 10
Newest
 Constituent
Impact
~4k people reached

  • 0 posts edited
  • 2 helpful flags
  • 52 votes cast
Mar
31
comment A secret in a URL
If implementing such a thing, remember that most webservers log the url, which might or might not be desirable.
Mar
29
comment How can i read the source code of this encoded powershell script from the registry?
Could you please use at least a pastebin instead of a rar file?
Mar
18
comment Why does Telegram not use end-to-end encryption?
Exactly. It's always a weighting between usability and security. Telegrams end-to-end encrypted chats ("secret chats") are bound to the devices that were used to start that chat.
Mar
18
comment Why does Telegram not use end-to-end encryption?
Telegram allows you to use different clients with the same account at the same time, e.g. Telegram on your mobile and Telegram Desktop. So at any given time, a new "party" (new client from existing user) can join.
Feb
3
comment My school wants to keep the details of our door authentication system a secret. Is that a good idea?
Do you have a source for the "give the root/Administrator password to a couple of the students"? I'd like to read more about that.
Jan
16
comment Can I trust my antivirus' assessment of my computer as clean, if it previously found threats?
No. For all you can know, the virus could have replaced your AV and display "no result".
Jul
25
awarded  Constituent
Jul
21
awarded  Caucus
Nov
27
comment Risk when attacker has only physical access to a computer's USB port
And no, you don't need a custom device. You can modify the firmware on some usual usb flash devices. Just search for BadUSB.
Nov
27
comment Risk when attacker has only physical access to a computer's USB port
Just stick a custom flash device into the port that tells the computer "I'm a hub, and a keyboard & flash memory device are attached here", let your "keyboard", send some key combinations to run software from the memory...
Nov
27
comment typical request, what type of encryption is this?
Sure, but for someone that is not familiar with IT-Sec, a hash is just a form of encryption. Yes, there is a difference (you can't decrypt it), but that is not important here.
Nov
27
comment typical request, what type of encryption is this?
He basically asks what hashing algorithm is used, so he can replace the passwords with new ones.
Nov
17
comment Tell people that I can encrypt emails
Just to be curios, shouldn't it be possible to add the PGP version as alternative, instead of multipart? (Or cann't outlook handle this correctly?)
Nov
9
comment Is this somebody trying to exploit a vulnerability?
maybe someone implemented the cookie jar in a wrong way?
Nov
9
awarded  Informed
Nov
9
awarded  Citizen Patrol
Oct
2
comment Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
I didn't even know about schroot, so I probably wouldn't have found that.
Oct
1
comment Even with the Shellshock patch, isn't Bash vulnerable to command redefinition?
@ninjalj Interesting. I currently don't have the time or environment to create a test for this, so I wonder if system from an SUID binary can result in this bug.
Sep
30
awarded  Enlightened
Sep
30
awarded  Nice Answer