Reputation
387
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 5 14
Impact
~48k people reached

  • 0 posts edited
  • 0 helpful flags
  • 11 votes cast
Jan
2
comment Is Django vulnerable to shellshock?
@HamishDowner in the future use '@nick' tag so the person you mention gets a notification.
Jan
2
awarded  Teacher
Jan
2
comment Reversing a block hash of SHA-1 with known Plaintext?
I think you have the same question I had before crypto.stackexchange.com/questions/8496/…
Jan
2
comment Is sha-1 hash always the same?
Python (among other high-level languages) handles problem you described very well: there is a strict distinguition between byte and a character.
Jan
2
answered Is SHA-1 encryption?
Jan
2
comment Is SHA-1 encryption?
This question should probably belong to crypto SE.
Dec
7
comment Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
Blind TCP session hijacking doesn't work since patches from 98-99.
Oct
5
awarded  Critic
Oct
5
comment Shellshock exploit on Linux Routers/Modems?
@Mark sort of maybe? It uses ash or other shell, so it would be vulnerable only if ash or this other shell would be vulnerable.
Sep
28
comment Shellshock exploit on Linux Routers/Modems?
@Mark So busybox is not a shell but a wrapper for ash, am I right?
Sep
28
comment Is Django vulnerable to shellshock?
How does it affect WSGI?
Sep
28
comment Shellshock exploit on Linux Routers/Modems?
"Most Linux-based routers are running an OpenWRT/DD-WRT derivative." - lolwut? And busybox is not a shell.
Sep
27
awarded  Popular Question
Sep
25
comment Is connecting to an open WiFi router with DHCP in Linux susceptible to Shellshock?
@sep332 your comment is worth converting to an answer or an answer to a separate question.
May
12
comment How secure is the SRP that Blizzard uses to protect passwords?
What CodesInChaos probably meant is that modexp with constant g and N can be fasten up, opposite to hash scrutinizing functions.
Feb
25
awarded  Famous Question
Feb
23
awarded  Yearling
Jan
27
awarded  Popular Question
Jan
1
awarded  Notable Question
Nov
29
comment Does a CA need to have the same type of key as the certificates it is signing? RSA / Elliptic Curve (EC/ECDH/ECDSA)
google has EC certificate signed with sha1-rsa serverfault.com/a/558322/201011