1,660 reputation
1415
bio website f-hauri.ch
location Switzerland
age 49
visits member for 2 years
seen 11 hours ago

I'm an old open-source independent hacker,

concerned about concepts of ethical hacking, teaching and sharing.

I like to play with shell, perl, lisp (sometime), sed and lot of other languages/environments.

Co-system administrator in several configurations, after various SMEs, I like to sometimes take time to focus on methods that I can improve or re-create (for example to change the level of abstraction).

In this, surfing on differents StackExchange's sites is a good way to boost my inspiration!


May
21
answered How to know if two IP addresses point to the same web server?
May
19
comment Computing entropy for a passphrase ( minimal word length … )
In fine, I've followed your recommendation to set default random generator to /dev/urandom, but I've added an option to let user ability to choose another way genpassphrase.pl -d wl_15bits.lst -r <(echo -ne '\001\002\003\004\005\006\007\010\011\012').
May
17
revised Computing entropy for a passphrase ( minimal word length … )
added 3929 characters in body
Apr
7
comment Computing entropy for a passphrase ( minimal word length … )
While I could use this to generate sometime (no more than 10 per a day) one passphrase, with the need of only 10 bytes, is there a good reason to not use /dev/random and to prefer /dev/urandom ??
Apr
7
comment Computing entropy for a passphrase ( minimal word length … )
No, I'm pretty sure in my second sample, using 450bits to humanly choose 5 words would drop entropy down under 75bit in fine. This seem paradoxal, but... There must exist a mathematical demonstration.
Apr
7
asked Computing entropy for a passphrase ( minimal word length … )
Apr
7
comment Decoding SMS in Chinese extracted from a Blackberry
Could you export to raw or hexadecimal ??
Apr
7
comment Decoding SMS in Chinese extracted from a Blackberry
This seem UTF8 or UTF16 viewed in Ascii console. There miss some values replaced there by an interrogation point: . Decoding this not possible in this state. we need original raw dumper in hex maybe.
Apr
5
revised What does this injected code do?
added 383 characters in body
Apr
5
comment What does this injected code do?
@D3C4FF Yes, of course as there is no external requirement, all this would be better done offline. (In fact the host I use to do this is not configured with a default route)
Apr
4
comment What does this injected code do?
Hum warn, this is another question! The answer could not by simply yes, but...
Apr
3
revised What does this injected code do?
added 347 characters in body
Apr
3
answered What does this injected code do?
Mar
30
comment How to get the prime number of a secret key in GnuPG?
You could easily get the source code and take a look, GnuPG is open-source!
Mar
30
comment Writing file shredder
Nice exploration of what's about! Just: In order to install a decoy, you have to: .1 shred all blocks, .2 fill all block with 0 (0x00) and finaly .3 install a fake. For ensuring not to leave suspect random data in the last block!
Mar
30
answered Is connection to keyserver encrypted?
Mar
30
answered Do keyservers keep logs of who adds whom to their keyrings?
Mar
19
comment Could I delete .csr files when the key is signed by CA
+1 as welcome on sse! (but your answer is something light;)
Mar
19
comment Could I delete .csr files when the key is signed by CA
+1, thank for explaining step by step! ( I only build client key on CA for special case where the client is a thin embed, built by scripts of mine by the same securised CA host... And the CA's disk is backuped on remote host, but encrypted.)
Mar
19
accepted Could I delete .csr files when the key is signed by CA