Reputation
1,896
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
4 10
Newest
 Editor
Impact
~112k people reached

  • 0 posts edited
  • 0 helpful flags
  • 56 votes cast
Apr
22
comment Client Side Encryption (CSE) across multiple clients
Please clarify. Is the EC2 instance unique to each client or is there just one instance which processes all the data submitted by clients? What is the specific risk/threat your trying to protect against?
Mar
20
comment Are regular expressions vulnerable to code injection?
If your regular expression is coming from an insecure source, then you definitely have a security problem and you can definitely inject malicious code via the regular expression. Remember, any string of characters is a regular expression (which only matches itself) and all regular expression engines allow you to escape characters with 'special' meanings so you can escape the |, (, {, etc to easily generate the fork bomb you reference.
Mar
19
answered During a penetration test, when is it preferable to use reverse HTTP payload and when reverse TCP payload?
Mar
19
answered Collect infected email attachments
Mar
19
answered Are regular expressions vulnerable to code injection?
Mar
11
comment Encrypted Malicious Traffic Database
I think @schroeder's point is very valid. Maintaining a database of known tools will be next to impossible and you only have to change the tool slightly to not match. However, a system which learns about 'normal' traffic and then identifies abnormal is likely to be more resilient. I also wonder how reliable the metadata you plan to use will prove to be - a lot is done with encryption of data to minimise such patterns as they are a source often used to try and reverse engineer encryption.
Mar
11
answered What leaked mass surveillance capabilities have not been explained by vulnerabilities we have learned about since 2014?
Mar
11
answered Should I allow browsers to remember my passwords and synchronize them?
Mar
11
answered Hack-resistant hosting solution for non-profit?
Mar
7
answered What implications does the KeRanger infection have for Mac OSX security?
Mar
4
answered Privilege seperation when using the same login credentials?
Mar
4
answered Email unsubscribe handling security
Mar
4
comment Is it safe to allow www-data to execute privileged commands?
OMG! I feel like I've time warped back to 2000. If this is the sort of advice provided by the PHP community, no wonder PHP has such an awful rep wrt security.
Mar
4
answered Safe email validation
Jan
21
comment Is it possible to secretly monitor/backdoor hardware?
Not only possible, has been attempted by governments (see for example en.wikipedia.org/wiki/Clipper_chip) and in some cases, governments have banned hardware from some sources due to fears either the hardware, firmware or software is somehow compromised (see popsci.com.au/make/hacks/…). I imagine that if you could inject a doddgy random number generator into a supply chain which has predictable generation properties, game over.
Dec
10
awarded  Editor
Dec
10
revised Can client-side hashing improve after-the-fact security in response to password leaks?
Updated based on additional info in comment
Dec
5
answered Can client-side hashing improve after-the-fact security in response to password leaks?
Dec
4
comment How does correct grammar affect password security?
@Ben We have to accept that passwords are fundamentally broken as a concept. The best we can do is hope we stay just in front of the current techniques and where possible, use things like 2FA. However, I think your statement that you can apply the technique in a few hours is for now overstated. As the article you cite points out, generating effective phrase lists is complex and time consuming and often requires using social eng. techniques to reduce the search space. This will change as pre-compiled phrase lists become more readily available, but for now it is a reasonable technique
Nov
24
comment LastPass - Best practices on foreign devices
@scott That will all depend on whether is is real 2FA or just the very common 2 step authentication which many 'sell' as 2FA. For example, recent hacks of google accounts which use 2 step authentication involving a code sent via SMS show the weakness of this approach. Because it does not rely on what you have (the phone) but on the number associated with the phone, a little social engineering of the provider and redirecting the number to a different phone and the 2 step authentication is bypassed