1,660 reputation
1415
bio website f-hauri.ch
location Switzerland
age 49
visits member for 2 years, 1 month
seen Dec 1 at 8:27

I'm an old open-source independent hacker,

concerned about concepts of ethical hacking, teaching and sharing.

I like to play with shell, perl, lisp (sometime), sed and lot of other languages/environments.

Co-system administrator in several configurations, after various SMEs, I like to sometimes take time to focus on methods that I can improve or re-create (for example to change the level of abstraction).

In this, surfing on differents StackExchange's sites is a good way to boost my inspiration!


Mar
19
accepted Could I delete .csr files when the key is signed by CA
Mar
19
revised Could I delete .csr files when the key is signed by CA
Warn to not turn the sens of question
Mar
19
asked Could I delete .csr files when the key is signed by CA
Mar
16
comment ROP Exploitation on ARM
Why did your link point to google redirect?
Mar
16
awarded  Scholar
Mar
16
accepted PGP on hibernation files?
Mar
16
comment PGP on hibernation files?
On my linux, PGP allocated memory won't be swapped and pre-hiberation script force umount all crypted filesystems.
Mar
11
comment What statistics can be used to identify pseudorandom data?
Why only 0 to 7, simple and small text could be encoded in 5, 6, 7 or 8 bits in order to hide them using stegano, for sample.
Mar
2
comment Why we use GPG signatures for file verification instead of hash values?
No if signing key is (correctly) password protected (Nota: Private key have to NOT be stored on public server!).
Mar
2
comment Why we use GPG signatures for file verification instead of hash values?
While anybody could create/modify a hashfile, only one could create a valid signature. Checksum is usefull for transfert or hardware issue, and signature is usefull for ensuring source.
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
Which bug? Be more detailed.
Mar
2
comment Are there any example domains where I can run my nmap scans just to learn?
U could nmap localhost first....
Mar
2
comment Odd Server Logs
IP 10.122.71.83 belong to Private Network. Do your server exist in such an intranet on 10.x.x.x/8 ? If yes, the attack is local.
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
Are you using ou did you already try OpenSSL suite?
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
Your unofficial reason don't match for self-signed (free of charge) certificates who have to expire too!
Feb
17
revised Connect through two VPN clients
added 123 characters in body
Feb
17
answered Connect through two VPN clients
Feb
17
revised Good, simple list of reasons that email is inherently insecure
added 1082 characters in body
Feb
16
revised February 7th 2013 Facebook integration error implications
added 157 characters in body
Feb
16
comment How does SRP prevent man-in-middle attacks?
@Polynomial Sorry, I've heard about blackberry's Server Routing Protocol and Microsofts *Security Rollup Package`* for sample, who both could be subject of discuss on security.stackexchange.com... Anyway for disembiguation and readability, remember acronym meaning at least once in a question is not too mutch!