630 reputation
422
bio website deetah.jogger.pl
location Łódź, Poland
age 23
visits member for 1 year, 10 months
seen Sep 8 at 23:28

My main programming interests are: C++, Linux, Bitcoin, PSP hacking, web scraping, PHP and Python. I currently study CS in Łódź, Poland.


Jul
23
comment What Linux software can I use to explore entropy of a file?
I didn't mention that I consider compressing with gzip as a good way to detect if the file is already compressed. Still, thanks for the writeup, though it doesn't really answer my question.
Jul
9
comment What are some considerations before moving personal data to Google Drive?
I would also note that it's not a requirement for the agency name to consist of three laters. Vide GCHQ.
Apr
21
comment How does BGP filtering work to prevent routing hijacking?
Could be merged with: security.stackexchange.com/q/56069/15648
Apr
7
comment How can NSA see everything without us noticing that?
@RoryAlsop: could you elaborate?
Apr
7
comment How can NSA see everything without us noticing that?
Okay, but world isn't USA only. There are other countries, other continents.
Apr
7
comment How can NSA see everything without us noticing that?
Personally I don't understand how it relates to my question.
Apr
7
comment How can NSA see everything without us noticing that?
You can theorize and still refer to the facts you know.
Apr
7
comment How can NSA see everything without us noticing that?
How is that? We're theorizing about an attack on a system we know very little about. My question is, among other things, about processes that could produce such a gigantic system in a way that it remains undetectable.
Jan
21
comment RSA key recovery using sound - How does it work?
Well, I guess that you might be right. My question is a bit broader though.
Jan
21
comment How to know if connection is encrypted
I wanted to point out that padlock is not always visible in the browser. Embedding a HTTPS website in a HTTP one using <iframe> breaks this.
Jan
21
comment In Tor, what stops the end server from following the breadcrumbs back to their origin?
I don't like the answer. You seem to imply that the legal issue is the only problem here. Doesn't Tor use some kind of forward secrecy?
Dec
13
comment MySQL SQL injection without stacked queries - what is actually possible without affecting the FS?
Thanks for the locking trick, that's interesting! Also, can I modify the queried table from withing a SELECT statement?
Oct
2
comment Plausibly deniable SSH - does it make sense?
BTW, in the explanation for closing you ticked "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem.". Please note the "unless" part.
Oct
2
comment Plausibly deniable SSH - does it make sense?
I'm not asking about implementation details, I believe I could probably manage to do it. I was trying to do some research on the protocol properties instead, to know if it makes any sense.
Oct
2
comment Plausibly deniable SSH - does it make sense?
It's a theoretical question - I, personally, am not employed, still a student. I believe there could be other uses for this technique and I'm just curious if this has a chance of working.
Sep
17
comment MySQL SQL injection without stacked queries - what is actually possible without affecting the FS?
Nope, I don't. :/
Sep
12
comment How to protect the code of Windows applications against path traversal?
Ah, you mean the HTTP server I wrote? More of a demo, with a big warning "don't use it on production". Yet I'd rather make it secure. Its main use scenario is simple file (or directory) sharing over a trusted network.
Sep
12
comment How to protect the code of Windows applications against path traversal?
It is. Here's the code: svn.nmap.org/nmap/ncat/scripts/httpd.lua
May
6
comment VCS to manipulate returned trees to prevent leaks?
@Adnan: I did a search here (didn't really think of programmers.stachexchange.com) and couldn't find anything that fitted the idea. Though from the quick reading of threads you linked to, it looks like, as Xander put it, it's just not worth it. And I can pretty much believe it.
May
6
comment VCS to manipulate returned trees to prevent leaks?
And more seriously, that's interesting. I wonder why nobody thought of it.