27,846 reputation
1082119
bio website
location Finland
age
visits member for 1 year, 9 months
seen 54 mins ago

I enjoy working with security stuff. You can reach me on: (my_name).stackexchange@live.fi


Jul
28
comment Are antiviruses still useful?
Very similar to Are signature based antivirus or antimalware effective?
Jul
28
comment How to secure a public device against abuse?
We use the same system in Finland for washing machines. Call the number to pre-activate the washing machine, then press the button to fully activate it.
Jul
24
comment Does cPanel store my login password as plaintext
This question already has answers in "Does Facebook store plain-text passwords?"
Jul
23
comment How do I check if a gmail/gtalk SSL certificate is valid?
This doesn't address the OP's question.
Jul
23
comment Open list of adult websites for child internet
Honestly, these days, when somebody wants to see something on the Internet, there are always ways to do it. Initiating an honest parental and two-sided discussion with your children is far more effective. That works if they're not too young. However, if they're too young for this discussion, they're probably too young to be left online alone.
Jul
21
comment Pivoting without meterpreter
Second to meterpreter pivoting, one of the best methods is using SSH port forwarding ubuntuguide.org/wiki/Using_SSH_to_Port_Forward
Jul
16
comment Are there any systems out there that use a one-time pad?
Whoa! Pohjala gives you 350 for each list? Aktia gives you only 148, and Nordea even less.
Jun
27
comment How can clicking a link in a Facebook users news feed compromise their account
This is extremely too broad. There are tons of things that could have happened here. The "phishing link" is actually a Facebook App that requests permission to post on your behalf, a malware downloaded from somewhere else, some client-side attack against the browser, the password has been leaked somehow, a keylogger, some other vulnerability on the victim machine, using the account on an untrusted machine, or any number of the other 100 possibilities.
Jun
10
comment What is the difference between https://google.com and https://encrypted.google.com?
@Pacerier Originally, no. The encrypted. domain was where Google first rolled SSL support. However, after they added SSL support to the main domain, that became the distinction.
May
27
comment Is there anyway to generate a SAM file?
SAM file follows the Windows registry format, which is documented here sentinelchicken.com/research/registry_format With that, and some Registry viewer like RegistryViewer you can learn a lot about the SAM file and how to generate them.
May
19
comment Are random URLs a safe way to protect profile photos?
@owenfi Generate 128bit+ values and you're alright. For your specific case and application, that's more than good enough.
May
12
comment Does WinRAR leave traces of temporarily extracted files?
@Bob Indeed. I've just tested it and in some cases the file was kept in the temp folder.
May
8
comment Is AES encryption vulnerable?
Not the exact question, but yours is already answered there Are there limits (or, what are the limits) to our understanding of AES's resistance to known plaintext attacks?
May
7
comment A tiny version of wget (51 bytes?)
@grawity Very well, thanks for the explanation. I must have used socket() and connect() when I did it with about 800 bytes.
May
5
comment A tiny version of wget (51 bytes?)
Hey, Johannes. Thanks for following up on your post here. Any theories on why the executable is that big? If I recall correctly, one can easily open('/dev/tcp/IP/port'), send a GET URL in that stream, and then save the body of the response to a file. Last time I did that it took about 800 bytes of shellcode (I suppose it can be made a bit smaller, but I'm not that good with shellcode).
May
5
comment A tiny version of wget (51 bytes?)
@lorenzog Nothing fancy. I actually just right-clicked on the .pcap file and chose "Open with..." and then chose Wireshark.
Apr
28
comment Is the root CA certificate required in the .crt file?
@A.Jesin Just wait a bit. The question will be closed on its own.
Apr
27
comment Hashing credentials. Is hash(email+password) secure enough?
I'm glad that assumptions worked out fine this time :)
Apr
27
comment Hashing credentials. Is hash(email+password) secure enough?
This cannot be further from the question because OP hasn't specified which hashing algorithm he's using, on which is the whole premise of your answer is based. OP is asking about storing the email with the password as a hash in one field to use for user login.
Apr
25
comment Avoiding SSL handshake for each call
Have a look at this security.stackexchange.com/questions/29632/…