311 reputation
1413
bio website
location
age
visits member for 2 years, 2 months
seen yesterday

1d
asked Is there an exploit for python hash collision?
Feb
27
comment Timsort python exploit
@schroeder but they may be too.
Feb
27
comment Timsort python exploit
@schroeder Why "can this bug be exploited" is not a security question?
Feb
27
comment Timsort python exploit
@CodesInChaos DoS is still a security issue.
Feb
27
comment Timsort python exploit
@schroeder That's what i'm asking. Now open the question.
Feb
26
comment Timsort python exploit
@schroeder it could lead at least to crash due to unhandled exception or segfault.
Feb
26
asked Timsort python exploit
Feb
23
awarded  Notable Question
Jan
12
comment What is the purpose of the “Password minimum age” setting?
This would only work if passwords are unsalted, or if salt is the same for an user. MS still uses fast unsalted hashes which are unsecure for decades
Jan
2
comment Is Django vulnerable to shellshock?
"The specific problem is in allowing attacker controlled environment variables." +1 for that. Any feature is a security threat in the same time. If it's not needed - it has to be turned off.
Jan
2
comment Is Django vulnerable to shellshock?
@HamishDowner in the future use '@nick' tag so the person you mention gets a notification.
Jan
2
awarded  Teacher
Jan
2
comment Reversing a block hash of SHA-1 with known Plaintext?
I think you have the same question I had before crypto.stackexchange.com/questions/8496/…
Jan
2
comment Is sha-1 hash always the same?
Python (among other high-level languages) handles problem you described very well: there is a strict distinguition between byte and a character.
Jan
2
answered Is SHA-1 encryption?
Jan
2
comment Is SHA-1 encryption?
This question should probably belong to crypto SE.
Dec
7
comment Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
Blind TCP session hijacking doesn't work since patches from 98-99.
Oct
5
awarded  Critic
Oct
5
comment Shellshock exploit on Linux Routers/Modems?
@Mark sort of maybe? It uses ash or other shell, so it would be vulnerable only if ash or this other shell would be vulnerable.
Sep
28
comment Shellshock exploit on Linux Routers/Modems?
@Mark So busybox is not a shell but a wrapper for ash, am I right?