309 reputation
19
bio website
location
age 30
visits member for 1 year, 10 months
seen Jul 6 at 7:41

Lucky those who have knowledge to help and assist others :)


Jul
2
awarded  Curious
Jun
23
comment Crack Unknown Encryption
at that lenght, sure it's not an OTP? Does somehow encrypted mean that the principle is that there is a key, a message and a algorithm?
May
18
comment Can a guest virtual machine be compromised by a virus on the host machine?
Your worry mentioned above is in the case that you rent a vm and the host is not in your control, right?
May
18
comment Can a guest virtual machine be compromised by a virus on the host machine?
for curiousity's sake: did you have an idea or logic that would suggest otherwise, that means a concept/case in which a host is secured against its host?
Apr
24
accepted Is wiping memory at code/end good practise?
Apr
24
comment Is wiping memory at code/end good practise?
my joke operation system/setting is called one of the many JavaScript engine implementations. With all the GC and caching and optimization I am unsure if the "OS" cleares memory principles applies. Therefore I assumed that there are joke OS/situation and hence to be sure the step to wipe sensitive data is a recomended best practise step, just in case. Thanks for the insights of the answer.
Apr
24
asked Is wiping memory at code/end good practise?
Apr
8
comment Heartbleed and Routers/ASAs/other
+1 I would also like to know if OpenSSH is vulnerable. It also features a heartbeat thing (freecode.com/projects/openssh-watchdog) but I cannot find out quickly if that is linked to the heartbeat features's bug in OpenSSL
Apr
8
comment What should end-users do about Heartbleed?
@ChrisO'Kelly Update Browsers, because of the update of the certificates that will occur now? thanks for acclarification. maybe you can phrase your comment to an answer?
Apr
7
comment Is there a way to prevent software from accessing hardware IDs?
can you also specify which "software" you mean? drivers are software. Shareware is software. A webbrowser is software. surely it might matter
Apr
6
comment Techniques for enumerating enabled apache modules
Do I miss the part where the tool gives info about the installed apache modules? How for instance would I know from the output if mod_rewrite.c was enabled or not?
Apr
6
comment Is it illegal to publicly reveal security flaws in a service?
Also interesting to know does the site owner brakes the law, knowingly ignore the security flaw risking users' data?
Apr
6
comment is there any 100% secure way for form authentication and sending information from client side to server side over internet pages?
+1 Adding to the above: Using SSL might require to trust the involved CA which also defeats 100% security goal :)
Apr
6
asked Enabling virutalization, addressing the bluepill risk?
Apr
6
comment PHP encrypt and decrypt with certificate
How does the key signing play a role here?
Apr
6
comment PHP encrypt and decrypt with certificate
"need to get the private key on the receiving end" is maybe not the best concept. You would rather "get the public key to the sending end"
Apr
6
comment PHP encrypt and decrypt with certificate
+1 for being good enough to mention that in most cases (message length > keylegth of asymmetric key) symmetric encryption is used internally. Showing that the decision in this case is really not possible. It will also be symmetric ciphers involved.
Apr
6
comment PHP encrypt and decrypt with certificate
the feature that the receiving end is limited to decrypting the message and prevented from encrypting, required that the "public key" is not really public, right?
Apr
6
revised Why are apps for mobile devices more restrictive than for desktop?
added a paragraph
Apr
6
answered Why are apps for mobile devices more restrictive than for desktop?