1,650 reputation
1315
bio website f-hauri.ch
location Switzerland
age 49
visits member for 1 year, 11 months
seen Oct 18 at 7:04

I'm an old open-source independent hacker,

concerned about concepts of ethical hacking, teaching and sharing.

I like to play with shell, perl, lisp (sometime), sed and lot of other languages/environments.

Co-system administrator in several configurations, after various SMEs, I like to sometimes take time to focus on methods that I can improve or re-create (for example to change the level of abstraction).

In this, surfing on differents StackExchange's sites is a good way to boost my inspiration!


Mar
2
comment Why we use GPG signatures for file verification instead of hash values?
No if signing key is (correctly) password protected (Nota: Private key have to NOT be stored on public server!).
Mar
2
comment Why we use GPG signatures for file verification instead of hash values?
While anybody could create/modify a hashfile, only one could create a valid signature. Checksum is usefull for transfert or hardware issue, and signature is usefull for ensuring source.
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
Which bug? Be more detailed.
Mar
2
comment Are there any example domains where I can run my nmap scans just to learn?
U could nmap localhost first....
Mar
2
comment Odd Server Logs
IP 10.122.71.83 belong to Private Network. Do your server exist in such an intranet on 10.x.x.x/8 ? If yes, the attack is local.
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
Are you using ou did you already try OpenSSL suite?
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
Your unofficial reason don't match for self-signed (free of charge) certificates who have to expire too!
Feb
17
revised Connect through two VPN clients
added 123 characters in body
Feb
17
answered Connect through two VPN clients
Feb
17
revised Good, simple list of reasons that email is inherently insecure
added 1082 characters in body
Feb
16
revised February 7th 2013 Facebook integration error implications
added 157 characters in body
Feb
16
comment How does SRP prevent man-in-middle attacks?
@Polynomial Sorry, I've heard about blackberry's Server Routing Protocol and Microsofts *Security Rollup Package`* for sample, who both could be subject of discuss on security.stackexchange.com... Anyway for disembiguation and readability, remember acronym meaning at least once in a question is not too mutch!
Feb
16
comment How does SRP prevent man-in-middle attacks?
What do SRP mean? please give us reference or whole words!
Feb
15
revised February 7th 2013 Facebook integration error implications
added 1061 characters in body
Feb
13
comment How to detect KeyLogger on Mac OS X ?
Question title was modified in sense. Please ask another question if the meaning differ!
Feb
13
comment How to detect KeyLogger on Mac OS X ?
And my answer is: As keylogger is a kind of virus, without strong computer knowledge, u can't obtain reliable info by yourself! (anti-virus at root-kit-scanner won't find more that he can search about....)
Feb
13
comment How to detect KeyLogger on Mac OS X ?
@VansFannel not exactly, I material is your, scanning your hard-drive is not illegal, anyway you need strong computer knowledge to find a virus who claim to be not present and hide all ways to find them... (Installing a linux brigde on work's network stay forbiden.)
Feb
12
comment How to detect KeyLogger on Mac OS X ?
@VansFannel I rightly understand, but unfortunately, you can't, without having to do discutable things.
Feb
12
revised How to detect KeyLogger on Mac OS X ?
added 12 characters in body
Feb
12
revised How to detect KeyLogger on Mac OS X ?
added 12 characters in body