1,640 reputation
1315
bio website f-hauri.ch
location Switzerland
age 49
visits member for 1 year, 11 months
seen yesterday

I'm an old open-source independent hacker,

concerned about concepts of ethical hacking, teaching and sharing.

I like to play with shell, perl, lisp (sometime), sed and lot of other languages/environments.

Co-system administrator in several configurations, after various SMEs, I like to sometimes take time to focus on methods that I can improve or re-create (for example to change the level of abstraction).

In this, surfing on differents StackExchange's sites is a good way to boost my inspiration!


Apr
24
answered Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly?
Apr
24
comment Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly?
You already have at least two question in title!
Apr
24
comment “No hack no fee” pen-testing agreements
... Or maybe about an amount... For that kind of challenge, the amount of money have to be very attractive! Anyway, this has nothing to do with IT security... I agree with @RoryAlsop!
Apr
24
comment Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly?
Wow! There is a lot of different questions in one! Please ask many question of simplify our one. What's the main one??
Apr
24
revised Can “cat-ing” a file be a potential security risk?
added 606 characters in body
Apr
23
awarded  Good Answer
Apr
23
revised Can “cat-ing” a file be a potential security risk?
added 240 characters in body
Apr
22
comment Can “cat-ing” a file be a potential security risk?
@IvanKovacevic Yes, see my addendum. ( My first answer was too quick. sorry ;)
Apr
22
revised Can “cat-ing” a file be a potential security risk?
added 661 characters in body
Apr
22
awarded  Nice Answer
Apr
22
answered Can “cat-ing” a file be a potential security risk?
Apr
9
awarded  Popular Question
Mar
22
comment How secure is my system?
Good question! Go forward in continuing to ask this (even to yourself)! You're on the right way!
Mar
22
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Bank's IT prefer to delegate security responsabilities to experimented pro (like CISCO)... This means: There are very few IT admin in banks, that know how SSL do work... Unfortunately.
Mar
19
comment Generate Passphrase from the data & encrypted data
When you say generate did you mean retrieve?
Mar
11
comment Can a Ubuntu live usb be infected with spyware/ virus?
@aks md5 and iso is independant. md5 are made for that kind of verification. iso is a read-only filesystem holding a lot of meta information like owner, date of creation, ECC methods and so on. You may come in pain if you try to build an iso that match byte per byte the original iso (even if you know the tool and the syntax previously used to build them.). But anyway you could do has you think... Let my know in case of success!
Mar
10
comment Can a Ubuntu live usb be infected with spyware/ virus?
Already answered: Yes it is possible, but no you could not verify md5 from a re-created iso. Why is already explained too! Working around md5sum.txt as (already) explained is the right way. And no: md5sum.txt don't hold meta datas, you could simply read it by using more or less.
Mar
10
comment Can a Ubuntu live usb be infected with spyware/ virus?
@ask if your original iso is ubuntu-13.10-desktop-i386, the md5sum of this file must be 5765805c23215de23f7775d84a79e140
Mar
10
comment Can a Ubuntu live usb be infected with spyware/ virus?
@aks No, yes, but no: You could effectively re-create same iso, meaning same behaviours, but it's a little complicated because of boot-image syntax. And even, you're new iso will retain meta informations like creation date, ensuring md5sum won't match. The right solution is to compare md5sum.txt on both keys and run md5sum -c <md5sum.txt from usbkey root path (in md5sum.txt path are relative).
Mar
10
comment Can a Ubuntu live usb be infected with spyware/ virus?
Once you cd (change dir) to the root of your mounted usb. md5sum <md5sum.txt take the content of file md5sum.txt and check each file. At end, md5sum return result code $?==0 if all files was checked without corruption. So with && the command echo will be run only if previous command return RC=0.