Reputation
2,549
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
4 18 37
Impact
~97k people reached

10m
comment Find out if someone copied a file from my external hard disk
@ThomasWeller - that's what I wrote about an inspection without triggering the log.
2h
comment Removing malware from a malicious PDF file
possible duplicate of How to safely view a malicious PDF?
2h
comment Find out if someone copied a file from my external hard disk
@paj28 - it is possible, but expensive and ultimately futile. security.stackexchange.com/a/99597
2h
answered Find out if someone copied a file from my external hard disk
23h
comment Implications of hashing to UTF-8 in a cryptographic function
There's one ugly corner case here: errors in UTF-8 parsing may be much more frequent than in ASCII parsing.
Sep
1
revised Best way to scan for and eliminate earlier versions of SSL/TLS in a production environment
Typofix in title
Sep
1
comment What information can be gained given only a phone number?
This is very country- and provider-specific.
Aug
31
comment Docker: Central daemon model is flawed?
You have to consider that Docker development ... somewhat deviates ... from the normal open-source model. This is also called "a battle of architects".
Aug
31
revised A possible router XSS vulnerability
Retitled.
Aug
28
comment concrete real-life examples where grsecurity prevented an exploit
Grsecurity goes closed source. Not on the radar anymore, I'd say.
Aug
28
reviewed Approve Is Ghostery safe to use?
Aug
28
comment How does DRM stop copying?
Relevant: security.stackexchange.com/questions/4637/…
Aug
27
reviewed Reviewed PHP crypted or hashed string to decode
Aug
27
comment Webrtc privacy issues?
A server is much more convenient for large-scale collaborations, and it doesn't have WebRTC's privacy problem.
Aug
25
comment Interviews with staff members about privacy and security policies relevant to their positions
Have you got threats written down? Phishing, social engineering etc. ...? Do they know when to escalate? Have you got some horror stories (Royal prank) up your sleeve?
Aug
25
comment Automatic detection of a compromised web server
The ugliest attack would serve normal files to everybody but your CEO and CTO - and their secretaries.
Aug
25
comment Is a server infrastructure fundamentally possible which the smartest person can't breach?
Chess is a finite full information game. We know an equilibrium exists, even if we don't know how to compute it.
Aug
25
comment Is a server infrastructure fundamentally possible which the smartest person can't breach?
You are looking for a well-defined equilibrium in a game with huge uncertainty. There's no static equilibrium here, just an arms race. An arms race with no rules - anything goes, like @schroeder said, chocolate bars and rubber hoses. Oh, and women (or men). The game is ages old, it's called war.
Aug
24
comment A compromised USB
phyrfox, please study the matter just a bit more. Your advice is dangerous. It may work 9 times out of 10, but otherwise it'll wreak havoc on the unfortunate person who blindly followed your ill-considered advice.
Aug
24
comment A compromised USB
And the running OS has access to the common hardware. The risk ain't worth it. Of course, if you have a throwaway airgapped rig that can be studied by your forensics team, by all means go for it.