F. Hauri

889 reputation

bio	website	f-hauri.ch
	location	Switzerland
	age
visits	member for	6 months
	seen	21 hours ago
stats	profile views	31

	889 reputation	bio	website	f-hauri.ch	visits	member for	6 months
19 badges		location	Switzerland		seen	21 hours ago

summary answers questions tags badges favorites bounties reputation activity

92 Comments

suggestions reviews revisions comments badges posts accepts all

21h	comment	Force clients to use proxy Take a look there: serverfault.com/questions/369829/…
1d	comment	Force clients to use proxy It may be a question for serverfault.com !
1d	comment	How to know if two IP addresses point to the same web server? In the other way, with virtualization like openVz you may have many differents hosts after only one mac address.
1d	comment	How to know if two IP addresses point to the same web server? Not if server use two ethernet cards, for sample on backbones or with backup lines
May 19	comment	Computing entropy for a passphrase ( minimal word length … ) In fine, I've followed your recommendation to set default random generator to `/dev/urandom`, but I've added an option to let user ability to choose another way `genpassphrase.pl -d wl_15bits.lst -r <(echo -ne '\001\002\003\004\005\006\007\010\011\012')`.
Apr 7	comment	Computing entropy for a passphrase ( minimal word length … ) While I could use this to generate sometime (no more than 10 per a day) one passphrase, with the need of only 10 bytes, is there a good reason to not use `/dev/random` and to prefer `/dev/urandom` ??
Apr 7	comment	Computing entropy for a passphrase ( minimal word length … ) No, I'm pretty sure in my second sample, using 450bits to humanly choose 5 words would drop entropy down under 75bit in fine. This seem paradoxal, but... There must exist a mathematical demonstration.
Apr 7	comment	Forensic Decoding Problem Could you export to `raw` or `hexadecimal` ??
Apr 7	comment	Forensic Decoding Problem This seem UTF8 or UTF16 viewed in Ascii console. There miss some values replaced there by an interrogation point: `�`. Decoding this not possible in this state. we need original `raw` dumper in hex maybe.
Apr 5	comment	What does this injected code do? @D3C4FF Yes, of course as there is no external requirement, all this would be better done offline. (In fact the host I use to do this is not configured with a default route)
Apr 4	comment	What does this injected code do? Hum warn, this is another question! The answer could not by simply `yes, but...`
Mar 30	comment	Secret key is a prime number in GnuPG You could easily get the source code and take a look, GnuPG is open-source!
Mar 30	comment	Writing file shredder Nice exploration of what's about! Just: In order to install a decoy, you have to: .1 shred all blocks, .2 fill all block with 0 (0x00) and finaly .3 install a fake. For ensuring not to leave suspect random data in the last block!
Mar 19	comment	Could I delete .csr files when the key is signed by CA +1 as welcome on sse! (but your answer is something light;)
Mar 19	comment	Could I delete .csr files when the key is signed by CA +1, thank for explaining step by step! ( I only build client key on CA for special case where the client is a thin embed, built by scripts of mine by the same securised CA host... And the CA's disk is backuped on remote host, but encrypted.)
Mar 16	comment	ROP Exploitation on ARM Why did your link point to google redirect?
Mar 16	comment	PGP on hibernation files? On my linux, PGP allocated memory won't be swapped and pre-hiberation script force umount all crypted filesystems.
Mar 11	comment	What statistics can be used to identify pseudorandom data? Why only `0 to 7`, simple and small text could be encoded in 5, 6, 7 or 8 bits in order to hide them using stegano, for sample.
Mar 2	comment	Why we use GPG signatures for file verification instead of hash values? No if signing key is (correctly) password protected (Nota: Private key have to NOT be stored on public server!).
Mar 2	comment	Why we use GPG signatures for file verification instead of hash values? While anybody could create/modify a hashfile, only one could create a valid signature. Checksum is usefull for transfert or hardware issue, and signature is usefull for ensuring source.