Reputation
Next tag badge:
167/100 score
19/20 answers
Badges
15 105 143
Impact
~1.6m people reached

Apr
12
revised Can files deleted from a true crypt volume be recovered?
Make it more clear how $Recycle.Bin relates to the Recycle Bin
Apr
12
reviewed Approve How do I pick a VPN provider?
Apr
10
reviewed Reopen Does non-persistent data ever need to be encrypted?
Apr
6
revised How is WhatsApp sending end-to-end encrypted messages in push notifications?
deleted 35 characters in body
Apr
6
comment Whatsapp encryption keys
@PyRulez It would still a problem. A silent update that patches LoginActivity.java and adds 2 lines of codes to take your password from the input field and send it to WhatsApp servers. Another way is to patch the message decryption logic and append code that sends the message to WhatsApp servers. Even another way to do it is to duplicate the message the encrypt the other copy with WhatsApp-provided key. The possibilities are endless. In the end, no matter what technologies and cryptomagic they use, you have to decide whether you trust WhatsApp or not. Personally, I still use WhatsApp.
Apr
4
reviewed Leave Closed Is there any way a website can show it hasn't been “hijacked” by the authorities?
Apr
4
reviewed Approve Risks of using a webpage without SSL/TLS for donations
Apr
3
comment How does attacker Brute force facebook account if there is a limit for tries?
The video is from 2014. This leads me to believe this was made around the time when Facebook had missing throttling on few actions (pwndizzle.blogspot.fi/2014/02/…), probably one of them was the recovery code (6 digits, 1 million possibilities) The "attacker" didn't really brute-force the password; he brute-forced this recovery code. Incidentally, a month ago somebody discovered the same issue with Facebook beta installation (More here: anandpraka.sh/2016/03/…)
Apr
3
reviewed Close How does attacker Brute force facebook account if there is a limit for tries?
Apr
3
reviewed Approve Md5 vs Md4 recognition
Apr
3
reviewed Approve Getting Certificate KeyContainerName to initialize CspParameters
Apr
1
reviewed Delete Can the OWASP ZAP check XSS for REST API
Mar
31
reviewed Delete With Ubuntu on Windows 10, could exploits and malware that work on Ubuntu (or related distros) work on Windows?
Mar
29
reviewed Close Hosting a “Capture the Flag” style competition for fun and learning?
Mar
29
reviewed Approve How did FBI/DoJ retrieve the data stored on the encrypted iPhone?
Mar
29
reviewed Close Is it possible to hide malicious code within/behind an image?
Mar
26
comment How to extract windows event logs from a hard disk forensic image?
Extract all .evt files from C:\Windows\system32\winevt\logs.
Mar
25
reviewed Approve Why do ALGs restrict traffic on a given TCP port based on the protocol?
Mar
24
reviewed Approve How can someone spoof texts with my phone number?
Mar
24
reviewed Approve Is Apple's AirPort Time Capsule vulnerable to ransomware?