Reputation
33,620
Next tag badge:
166/100 score
19/20 answers
Badges
13 105 141
Newest
 Nice Answer
Impact
~1.5m people reached

16h
comment Why does Hydra return 16 valid passwords when none are valid?
@tjt263 You're missing the part where there two login forms. One to login and interact with DVWA itself, and the second one is the brute-forcable one.
2d
reviewed Reject Better techniques than url parameter encryption
Feb
9
awarded  Nice Answer
Feb
6
awarded  Nice Answer
Feb
5
awarded  Good Answer
Feb
4
revised While working from home, is it a bad idea to give the company you work for your IP address?
It doesn't "leak".
Feb
3
reviewed Approve What does this JavaScript do? It looks dangerous to me
Feb
3
reviewed Reject Why is leaving a passworded SSH over the internet so bad?
Feb
3
reviewed Approve Is it possible to perform bruteforce attack with proxy on a website?
Feb
3
reviewed Approve What happens if two parties have the same public key?
Jan
31
comment Can the MAC address be “hidden”? ie that the information is not even delivered
Very badly written question. I suggest you organize your thoughts, do some Googling, and then come back to edit this question and make it better if you still have some ununderstood concepts or some specific question.
Jan
27
revised What should a security audit report include?
deleted 10 characters in body
Jan
27
revised What should a security audit report include?
deleted 3 characters in body
Jan
19
revised Does bcrypt compare the hashes in “length-constant” time?
added 1179 characters in body
Jan
13
reviewed Approve Is Google identity sign in product HIPAA compliant?
Jan
8
reviewed Approve How to get complete memory dump in Windows 10?
Jan
2
reviewed Reject html-5 tag wiki excerpt
Dec
23
comment Why not simply backup the TrueCrypt container file?
@WadihM. It's not that easy to answer, really. TrueCrypt uses XTS mode for the block ciphers. You see, XTS is pretty much ECB in that each block is independently encrypted (but with some "tweaks"). Patterns of empty space are quite easy to spot with XTS, and with enough backup samples it's possible to detect more patterns. There isn't much public work done on this, so it's hard to say. My original answer still applies; yes, it's possible, but there's nothing tangible yet.. it's only "pre-theoretical".
Dec
22
revised Why not simply backup the TrueCrypt container file?
added 1 character in body
Dec
20
awarded  Guru