283 reputation
1312
bio website
location
age
visits member for 1 year, 8 months
seen Oct 5 at 8:57

Oct
5
awarded  Critic
Oct
5
comment Shellshock exploit on Linux Routers/Modems?
@Mark sort of maybe? It uses ash or other shell, so it would be vulnerable only if ash or this other shell would be vulnerable.
Sep
28
comment Shellshock exploit on Linux Routers/Modems?
@Mark So busybox is not a shell but a wrapper for ash, am I right?
Sep
28
comment Is Django vulnerable to shellshock?
How does it affect WSGI?
Sep
28
comment Shellshock exploit on Linux Routers/Modems?
"Most Linux-based routers are running an OpenWRT/DD-WRT derivative." - lolwut? And busybox is not a shell.
Sep
27
awarded  Popular Question
Sep
25
comment Is connecting to an open WiFi router with DHCP in Linux susceptible to Shellshock?
@sep332 your comment is worth converting to an answer or an answer to a separate question.
Sep
25
comment How to exploit bash shellshock expoit?
It can have only one answer, what do you want more?
May
12
comment How secure is the SRP that Blizzard uses to protect passwords?
What CodesInChaos probably meant is that modexp with constant g and N can be fasten up, opposite to hash scrutinizing functions.
Feb
25
awarded  Famous Question
Feb
23
awarded  Yearling
Jan
27
awarded  Popular Question
Jan
1
awarded  Notable Question
Nov
29
comment Does a CA need to have the same type of key as the certificates it is signing? RSA / Elliptic Curve (EC/ECDH/ECDSA)
google has EC certificate signed with sha1-rsa serverfault.com/a/558322/201011
Nov
26
comment How common is Perfect Forward Secrecy in HTTPS clients?
@CodesInChaos at least client's parameters are transmitted unprotected. Can the mitmer tell the server the clent doesn't support DHE?
Nov
26
revised Why do people say that PHP is inherently insecure?
added 3 characters in body
Nov
26
comment What algorithms are best be cracked by GPU?
"Salted passwords are another 'obstacle' to GPU cracking." - salt make any bruteforce harder, changing the complexity from O(log n) to O(n) regardless if it's CPU, GPU or IdkPU.
Nov
26
comment How secure is the SRP that Blizzard uses to protect passwords?
"Those rough costs suggest that the Twisted Edwards precomputation should be 3.6x faster, which is promising!" - not that much, but it's worth mentioning on SRP page.
Nov
26
comment How secure is the SRP that Blizzard uses to protect passwords?
How much ressources do you need and how much does it speed up?
Nov
26
comment How secure is the SRP that Blizzard uses to protect passwords?
@CodesInChaos interesting, can you explain it?