434 reputation
210
bio website
location
age 30
visits member for 1 year, 11 months
seen 2 hours ago

Lucky those who have knowledge to help and assist others :)


3h
awarded  Enlightened
3h
awarded  Nice Answer
11h
asked safely changing distribution, is there a strategy to get an distro iso image untampered?
14h
answered Linux password changed. Is this an attack or a hardware glitch?
15h
comment Linux password changed. Is this an attack or a hardware glitch?
also nice to know: in linux wayland or X11? given that X11 might allow a hacked browser to send shit to other X11 windows (i.e a sudo'ed terminal).
15h
comment Linux password changed. Is this an attack or a hardware glitch?
has there been some "separation" of the OSes? i.e encrypted partitions, or may we assume a root in your Linux means essentially all control over windows 8 too?
Jul
2
awarded  Curious
Jun
23
comment Crack Unknown Encryption
at that lenght, sure it's not an OTP? Does somehow encrypted mean that the principle is that there is a key, a message and a algorithm?
May
18
comment Can a guest virtual machine be compromised by a virus on the host machine?
Your worry mentioned above is in the case that you rent a vm and the host is not in your control, right?
May
18
comment Can a guest virtual machine be compromised by a virus on the host machine?
for curiousity's sake: did you have an idea or logic that would suggest otherwise, that means a concept/case in which a host is secured against its host?
Apr
24
accepted Is wiping memory at code/end good practise?
Apr
24
comment Is wiping memory at code/end good practise?
my joke operation system/setting is called one of the many JavaScript engine implementations. With all the GC and caching and optimization I am unsure if the "OS" cleares memory principles applies. Therefore I assumed that there are joke OS/situation and hence to be sure the step to wipe sensitive data is a recomended best practise step, just in case. Thanks for the insights of the answer.
Apr
24
asked Is wiping memory at code/end good practise?
Apr
8
comment Heartbleed and Routers/ASAs/other
+1 I would also like to know if OpenSSH is vulnerable. It also features a heartbeat thing (freecode.com/projects/openssh-watchdog) but I cannot find out quickly if that is linked to the heartbeat features's bug in OpenSSL
Apr
8
comment What should end-users do about Heartbleed?
@ChrisO'Kelly Update Browsers, because of the update of the certificates that will occur now? thanks for acclarification. maybe you can phrase your comment to an answer?
Apr
7
comment Is there a way to prevent software from accessing hardware IDs?
can you also specify which "software" you mean? drivers are software. Shareware is software. A webbrowser is software. surely it might matter
Apr
6
comment Techniques for enumerating enabled apache modules
Do I miss the part where the tool gives info about the installed apache modules? How for instance would I know from the output if mod_rewrite.c was enabled or not?
Apr
6
comment Is it illegal to publicly reveal security flaws in a service?
Also interesting to know does the site owner brakes the law, knowingly ignore the security flaw risking users' data?
Apr
6
comment is there any 100% secure way for form authentication and sending information from client side to server side over internet pages?
+1 Adding to the above: Using SSL might require to trust the involved CA which also defeats 100% security goal :)
Apr
6
asked Enabling virutalization, addressing the bluepill risk?