Reputation
Next tag badge:
160/100 score
19/20 answers
Badges
13 101 138
Newest
 Enlightened
Impact
~1.2m people reached

Jul
18
revised At what point in their employment should security policies be explained to an employee?
edited tags
Jul
15
reviewed Approve Is it secure to set default value for password field?
Jul
14
awarded  Nice Answer
Jul
14
awarded  Caucus
Jul
13
awarded  Nice Answer
Jul
12
reviewed Approve SSL encryption process and its security
Jul
12
reviewed Approve aireplay-ng is unable to send de-authentication packet
Jul
7
reviewed Approve Android disk encryption
Jul
2
comment How risky is connecting to a hidden wireless network?
@Pacerier As far as I know, it is possible. To deauth, you need the client's MAC address and the AP's BSSID, and then you simply deauthenticate the client. Both the client's MAC and the AP's BSSID can be easily captured from the network traffic. After the deauthentication, the client will try to associate again. You simply capture the handshake to get the SSID. So, yes, Malfoy is able to dea-auth and get the SSID after that.
Jun
16
revised What's the rationale behind Ctrl-Alt-Del for login
added 275 characters in body
Jun
12
reviewed Reject What can I do to rely less on certificate authorities?
Jun
10
reviewed Approve Is it possible to detect the real IP from a modifed header
Jun
6
reviewed Approve nmap detects opened port but can't connect with telnet
May
27
reviewed Reject ARP-poisoning on wireless network - no packets
May
26
comment How risky is connecting to a hidden wireless network?
@Pacerier Yes, correct.
May
25
comment How to secure MySQL database usernames and passwords within a php file?
possible duplicate of Reasonable way to store encrypted passwords in a webapp's database, Linux, and related to this security.stackexchange.com/questions/20461/…
May
25
comment How risky is connecting to a hidden wireless network?
@Pacerier I don't think it's possible to directly get the SSID of a hidden network because it's stripped from the AP beacon. However, the AP advertises the SSID's length in the beacon message. To obtain an AP's hidden SSID, you either wait until a client tries to connect, or you de-auth a client and the capture the association exchange.
May
23
reviewed Approve How to filter secure (HTTPS) websites by URL with regular expression?
May
19
reviewed Reject How secure is FileVault 2 while the computer is in sleep mode?
May
18
reviewed Looks OK VyprVPN (from GlodenFrog.com) weirdly keeps sending unauthorized suspecious data even after uninstall