161 reputation
2
bio website
location Ireland
age
visits member for 1 year, 6 months
seen Aug 15 '13 at 22:25

Unemployed C++ programmer.


Oct
12
comment Virus Encoded in Video
I actually found some malware exploiting that bug, many moons ago. Just browsing to a page with a crafty JPEG was enough to trigger code execution.
Oct
12
comment Known password length, brute force character in place?
JtR factors in trigraph frequencies when brute-forcing, i.e. it would try "bac" before "abc", since the first is a more common combination in English. That's not so dumb, but it's still brute force.
Oct
12
comment Known password length, brute force character in place?
Have you ever seen a login screen that said "you only got one letter wrong, keep trying!"?
Oct
11
comment How can you judge the physical security of a padlock?
1 pin is just taking the biscuit. You may also be interested in shims: wikihow.com/Use-a-Padlock-Shim. And the holy grail (for pin-tumblers): bump keys: youtu.be/pwTVBWCijEQ
Oct
8
comment Linux command logging?
I disagree, I don't think you can secure the bash history at all. Any semi-competent attacker could simply use ssh root@yourbox /bin/bash to execute bash without a login, leaving no wtmp entry and leaving .bash_history unmodified (thus nullifying the remote syslog approach). Be assured, an actual competent attacker will leave no stone unturned in covering their tracks.
Oct
8
awarded  Supporter
Oct
8
awarded  Teacher
Oct
8
answered What is the purpose of a fuzzer?