Reputation
1,869
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
5 13
Newest
 Yearling
Impact
~48k people reached

  • 0 posts edited
  • 38 helpful flags
  • 90 votes cast
May
13
comment SMTP Header Injection
@TonyMeyer Thanks for pointing out the brackets. I've corrected my answer with it.
May
13
revised SMTP Header Injection
Corrected email addresses
May
13
comment SMTP Header Injection
@Johnny_v I read the article and would say that there is little understanding of the protocols involved. The only problem is when the inbox of the receiver (recipient@test.com in your case) automatically makes a Reply all . This would lead to an possible attack. But as it stands there is no possibility to inject the CC without modifying the direct communication. Also they reference an article on the OWASP site that explains the attack scenario other (as I explained it).
May
13
answered SMTP Header Injection
May
12
comment Would my protocol be safe?
@S.L.Barth and the key is exchanged how?
May
12
answered Would my protocol be safe?
Apr
21
comment Decoding SHA-512 value
@CodesInChaos It depends on the concrete definition of rainbow table. They use a table of precomputed hashes to lookup the value for the hash. In my eyes this is a rainbow table. You never will have a rainbow table for all SHA512 hash values.
Apr
20
revised Decoding SHA-512 value
Added information
Apr
20
answered Decoding SHA-512 value
Nov
9
awarded  Yearling
Oct
14
comment Why the symmetric key is added to the message?
@raz Perhaps the lecturer has understand encryption but is unable to mediate his knowledge in an easy way... The explanation as given in this post is quite complete and correct.
Oct
14
revised Why the symmetric key is added to the message?
Extended answer
Oct
14
answered Why the symmetric key is added to the message?
Oct
14
comment Is it safe to use IP Addresses as an identity?
@Lighty But it still remains that the first answer is not correct and depends on the ISP...
Oct
14
comment Is it safe to use IP Addresses as an identity?
It is well known in Germany that your IP changes. This is a so called security feature of the ISPs. can also force the IP change by reconnecting to my ISP therefore I can change my IP always I want. Also the next problem is that my IP is later assigned to another user. And also I get an IP assigned that was assigned to another user before. For a background read the (translated german) wikipedia entry.
Oct
14
comment Is it safe to use IP Addresses as an identity?
For your first answer: Don't think localised to your own country. In Germany you get disconnected every 24 hours and get a new IP address every time you reconnect to your ISP.
Oct
7
reviewed No Action Needed Can you have Secure encryption with a backdoor, and still be secure?
Oct
7
awarded  Enthusiast
Oct
7
comment Breaking it gently
I would inform the owner of the package first. Only if the ower does not respond in a timely manner a full disclosure would be appropriate.
Oct
2
comment How to fix SSL algorithm for more security
@Elahe If you do not use certificates then you use TLS the wrong way.