31,525 reputation
1399132
bio website
location Finland
age
visits member for 2 years, 7 months
seen 1 hour ago

Mildot


1d
comment How risky is connecting to a hidden wireless network?
@Pacerier As far as I know, it is possible. To deauth, you need the client's MAC address and the AP's BSSID, and then you simply deauthenticate the client. Both the client's MAC and the AP's BSSID can be easily captured from the network traffic. After the deauthentication, the client will try to associate again. You simply capture the handshake to get the SSID. So, yes, Malfoy is able to dea-auth and get the SSID after that.
Jun
29
revised Firebug and cURL
added 2 characters in body
Jun
16
revised What's the rationale behind Ctrl-Alt-Del for login
added 275 characters in body
Jun
12
reviewed Reject What can i do to trust less on CA's?
Jun
10
reviewed Approve Is it possible to detect the real IP from a modifed header
Jun
6
reviewed Approve nmap detects opened port but can't connect with telnet
May
27
reviewed Reject ARP-poisoning on wireless network - no packets
May
26
comment How risky is connecting to a hidden wireless network?
@Pacerier Yes, correct.
May
25
comment How to secure MySQL database usernames and passwords within a php file?
possible duplicate of Reasonable way to store encrypted passwords in a webapp's database, Linux, and related to this security.stackexchange.com/questions/20461/…
May
25
comment How risky is connecting to a hidden wireless network?
@Pacerier I don't think it's possible to directly get the SSID of a hidden network because it's stripped from the AP beacon. However, the AP advertises the SSID's length in the beacon message. To obtain an AP's hidden SSID, you either wait until a client tries to connect, or you de-auth a client and the capture the association exchange.
May
23
reviewed Approve How to filter secure (HTTPS) websites by URL with regular expression?
May
19
reviewed Reject How secure is FileVault 2 while the computer is in sleep mode?
May
18
reviewed Looks OK VyprVPN (from GlodenFrog.com) weirdly keeps sending unauthorized suspecious data even after uninstall
May
13
awarded  Good Answer
May
11
awarded  Nice Answer
May
10
reviewed Approve Most secure password hash algorithm(s)?
May
6
reviewed Approve Is it possible to bypass HTML character reference encoding to inject SQL in this context?
May
5
revised Can a connected USB device read all data from the USB bus?
edited tags
May
5
reviewed Reject truecrypt tag wiki excerpt
May
5
reviewed Approve truecrypt tag wiki