1,650 reputation
1315
bio website f-hauri.ch
location Switzerland
age 49
visits member for 1 year, 11 months
seen 8 hours ago

I'm an old open-source independent hacker,

concerned about concepts of ethical hacking, teaching and sharing.

I like to play with shell, perl, lisp (sometime), sed and lot of other languages/environments.

Co-system administrator in several configurations, after various SMEs, I like to sometimes take time to focus on methods that I can improve or re-create (for example to change the level of abstraction).

In this, surfing on differents StackExchange's sites is a good way to boost my inspiration!


17h
comment How do I know if my computer is being used for a botnet-based DDoS attack?
The version of my published tool is more flexible.
17h
comment How do I know if my computer is being used for a botnet-based DDoS attack?
Yes, I wrote one tool, for one specific, but widely used ircboot. See my answer.
Oct
17
comment Can “cat-ing” a file be a potential security risk?
Not really, but you could use many different terminal implementation. XTerm could be switched between vt100 and tektronix mode, wich have totally different window-manipulation control sequences.
Oct
13
comment How can I find subdomains of a site?
You could even ask google! But this won't be a complete list!
Aug
30
comment Why do so many cracking attempts originate from China?
It's maybe your neighbor which hide his own address by spoofing chinese IP address.
Jul
19
comment What defines a programming language as useful for hacking?
@Luc: bash is a scripting language but it's also a powerfull user environment. You could make a lot of succesives tries against your goal, than finaly dump the history to your prefered editor ...to begin your work/script. You could even quickly edit temporary scripts, use myFunc() { ...; } on command line, create immediate loops, and so on...
Jul
6
comment Difference between binary malware and script-based malware?
In interpreted language, the script is not compiled, but interpreted! But the interpreter is compiled for each architecture. See also: Interpreted languages
Jun
2
comment How do you stop a hacker when their IP address is 0.0.0.0?
wordfence is a wordpress plugin. Have a look at you http server logs!
May
20
comment Correct way to get a number from 0-9 from a random byte?
@CodesInChaos The question seem more theoretical. Anyway someone could work on old firmware where modern PRNG simply don't exist... ( In his question, Johnny don't speak about modulo but divide by 25, which have probably not same cost ;-)
May
20
comment Correct way to get a number from 0-9 from a random byte?
Your first method use 1,02 bytes for 1 unbiaised number, your second method use 20 bytes for 1 near unbiaised number... Please have a look at my method that use only 0.8 bytes for 1 unbiaised number!
May
20
comment Correct way to get a number from 0-9 from a random byte?
@AndreasKrey Hmm, no: By using split you have 2x63% = 125% chances of having a correct number, while instead you only obtain 98% chance by each byte read from random generator.
Apr
30
comment Can “cat-ing” a file be a potential security risk?
Hmmm I agree, @mr.spuratic's answer is rich. But I bring useable tools to make tests easier, (hope you've tried it)... Anyway I got my 1st gold medal \@SO with this answer! So it's good! ;-). ( P.S: If some problems with function, maybe playing with timeout (-t .01) parameter could help )
Apr
24
comment Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly?
You already have at least two question in title!
Apr
24
comment “No hack no fee” pen-testing agreements
... Or maybe about an amount... For that kind of challenge, the amount of money have to be very attractive! Anyway, this has nothing to do with IT security... I agree with @RoryAlsop!
Apr
24
comment Which is more secure - a VPN, a proxy-server, Tor, etc.? And why so, exactly?
Wow! There is a lot of different questions in one! Please ask many question of simplify our one. What's the main one??
Apr
22
comment Can “cat-ing” a file be a potential security risk?
@IvanKovacevic Yes, see my addendum. ( My first answer was too quick. sorry ;)
Mar
22
comment How secure is my system?
Good question! Go forward in continuing to ask this (even to yourself)! You're on the right way!
Mar
22
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Bank's IT prefer to delegate security responsabilities to experimented pro (like CISCO)... This means: There are very few IT admin in banks, that know how SSL do work... Unfortunately.
Mar
19
comment Generate Passphrase from the data & encrypted data
When you say generate did you mean retrieve?
Mar
11
comment Can a Ubuntu live usb be infected with spyware/ virus?
@aks md5 and iso is independant. md5 are made for that kind of verification. iso is a read-only filesystem holding a lot of meta information like owner, date of creation, ECC methods and so on. You may come in pain if you try to build an iso that match byte per byte the original iso (even if you know the tool and the syntax previously used to build them.). But anyway you could do has you think... Let my know in case of success!