network profile
| bio | website | |
|---|---|---|
| location | Ireland | |
| age | ||
| visits | member for | 7 months |
| seen | Oct 12 '12 at 19:18 | |
| stats | profile views | 2 |
Unemployed C++ programmer.
|
Oct 12 |
comment |
Virus Encoded in Video I actually found some malware exploiting that bug, many moons ago. Just browsing to a page with a crafty JPEG was enough to trigger code execution. |
|
Oct 12 |
comment |
Known password length, brute force character in place? JtR factors in trigraph frequencies when brute-forcing, i.e. it would try "bac" before "abc", since the first is a more common combination in English. That's not so dumb, but it's still brute force. |
|
Oct 12 |
comment |
Known password length, brute force character in place? Have you ever seen a login screen that said "you only got one letter wrong, keep trying!"? |
|
Oct 11 |
comment |
How can you judge the physical security of a padlock? 1 pin is just taking the biscuit. You may also be interested in shims: wikihow.com/Use-a-Padlock-Shim. And the holy grail (for pin-tumblers): bump keys: youtu.be/pwTVBWCijEQ |
|
Oct 8 |
comment |
Linux command logging? I disagree, I don't think you can secure the bash history at all. Any semi-competent attacker could simply use ssh root@yourbox /bin/bash to execute bash without a login, leaving no wtmp entry and leaving .bash_history unmodified (thus nullifying the remote syslog approach). Be assured, an actual competent attacker will leave no stone unturned in covering their tracks. |
|
Oct 8 |
awarded | Supporter |
|
Oct 8 |
awarded | Teacher |
|
Oct 8 |
answered | What is the purpose of a fuzzer? |
