514 reputation
18
bio website github.com/Anorov
location
age
visits member for 1 year, 7 months
seen Sep 28 at 2:23

Jun
10
comment Can't understand SNORT rule pcre option syntax “?P=name”
@nik It's just an inconsistency in how different languages decided to design their regex syntax. They're equivalent; you just have to remember which languages support which, and which support both.
Jun
9
answered Can't understand SNORT rule pcre option syntax “?P=name”
Jun
9
comment Way to decode an encoded payload
@AsK It would appear you're severely misunderstanding how XSS protection should be implemented. User-supplied data should only be HTML escaped upon output, not input. That means you are not supposed to escape incoming data, but only escape it any time the server is outputting something to a client. This would fix your current problem and many other potential security and double-escaping problems. See: stackoverflow.com/a/13878047
Apr
3
answered SQL Injection via Unicode
Feb
24
awarded  Yearling
Dec
21
comment Can the xor of two RNG outputs ever be less secure than one of them?
@Matt Thanks! That does make sense.
Dec
21
comment Do generic custom scripts avoid detection more than common security applications?
Do you mean like using a custom script using C and sockets vs. using nmap, to avoid detection? I would say that for network scanning and reconnaissance: no, generally the behavior will be similar enough to flag both. However, when it comes to exploitation, usually rewriting or obfuscating exploit payloads is a good way to bypass IDSs and AVs.
Dec
21
comment Is my service provider hacked and what can I do to protect myself?
Carefully scan your computer for malware. Also, inspect your router to see if there are any peculiar DNS server entries.
Dec
21
comment Can the xor of two RNG outputs ever be less secure than one of them?
I am not a cryptography expert, but I want to say "no". XOR'ing two different same-length RNG outputs in the way you describe should be an effective way to hedge against one of the RNGs being biased or backdoored.
Dec
17
awarded  Popular Question
Nov
30
answered What methods are there of protecting a VPS from DDOS attacks?
Nov
1
comment Uploading Shell Using SQLI
AppArmor has made many a pentest quite a bit more difficult for me. I'm glad it's shipped by default for Ubuntu nowadays.
Nov
1
comment Can I limit PHP include() to specific directory trees?
In addition, be 100% sure the PHP installation on every server you're using is fully up to date. Any version 5.3.4 and above makes it impossible to truncate a filename with a null byte.
Nov
1
comment How does nmap determine if it's running HTTP service on a port? Fails here
nmap only does service detection if you pass the -sV flag.
Sep
28
comment Is it illegal to use Fake User-agents?
When weev was recently prosecuted and convicted of "hacking" AT&T's website, the prosecutors kept repeating over and over that his "spoofing" of an iPad (via a forged User-Agent header) was an indication of malicious/devious intent. I'm not sure if those same prosecutors would say such spoofing is outright illegal just on its own, but it was part of what got him convicted, so that should definitely be taken into consideration.
Sep
19
awarded  Critic
Sep
19
comment Popular Security “Cargo Cults”
And that's why strlcpy should be preferred over strncpy when copying whole strings.
Sep
19
comment Popular Security “Cargo Cults”
"effectively halving the security of a symmetric key". Not quite. It is an exponential decrease. A 64-bit key is much more than just "half as secure" as a 128-bit key. A 2048-bit key is also much less secure than a 4096-bit one, but that is still nearly impossible to bruteforce.
Sep
14
comment Are self-signed certificates actually more secure than CA signed certificates now?
If you assume that the server operator also has some secure way of communicating revocations (as CAs all, theoretically, do), and that all clients check this source before each new connection, then it actually would be pretty secure.
Sep
14
answered Are self-signed certificates actually more secure than CA signed certificates now?