meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 months |
| seen | 1 hour ago | |
| stats | profile views | 17 |
|
7h |
revised |
Can a windows phone be traced without a SIM and battery Clearer and more understandable heading |
|
7h |
suggested | suggested edit on Can a windows phone be traced without a SIM and battery |
|
1d |
comment |
Vulnerability testing without the use of exploits? @ub3rst4r I would assume if you have downloaded it from the Internet and someone is claiming it to be an 0-day, chances are it is some kind of a backdoor. A linux kernel 0-day is like a gem because of the wide spread deployment of Linux, from super computers to smart phones. Such exploits no longer exist free of cost. Therefore, make sure your system hasn't been infected. |
|
May 14 |
answered | Source where you can find if a CVE has a patch or not |
|
May 14 |
comment |
Source where you can find if a CVE has a patch or not Lucas, can you explain why you need any other service? Secunia has the details like the current status of the vulnerability etc. Is there some particular detail that you want and is not currently available on secunia? |
|
May 13 |
awarded | Enthusiast |
|
May 12 |
comment |
Vulnerability of the open port "if you scan machine A the port would be open but there's nothing running on it". I don't understand. If there is no service, the port will be closed. If machine A connects to a service running on machine B, it won't open any port on machine A. |
|
May 9 |
comment |
Eavesdropping a communication between a local application and the network I don't see any problem sniffing the traffic of your own applications. If packing inspection becomes illegal, every application layer firewall and deep packet inspection engine vendors would be out of business. |
|
May 9 |
comment |
Intel How Strong is Your Password page, good advice? Also, could you elaborate why you think it is a game over if they get hold of your hash? In Windows environment it is true due to the pass-the-hash phenomena but the same is not true for web applications. A properly hash password (such as through PKDF or bcrypt) together with a random salt can take forever for the attacker to crack. |
|
May 9 |
comment |
Intel How Strong is Your Password page, good advice? you are considering only brute force which IMHO won't be used by the attackers in most of the cases. What they do is creating large dictionaries and just by looking at the Intel advisory, many attacks would be generating dictionaries for such passwords patterns right now. In short, any publicly known password pattern is bad no matter how long because at the end you are attacking the pattern which is a lot easier than attacking individual randomly generated 10+ character passwords. |
|
May 9 |
answered | Is writing shellcode still a valid skill to have/learn? |
|
May 5 |
comment |
How to make sandbox-only internet access? if I am not wrong your solution is good for the first part (i.e no Internet access for anything other than browser) but won't stop the browser from access to the local file system where sensitive data is stored that the OP wants to protect. |
|
May 5 |
answered | How to make sandbox-only internet access? |
|
May 3 |
comment |
Confidentiality without Encryption - A way to circumvent Internet censorship thank you very much for your answer. That PyCrypto implementation is very useful. Compression is definitely be very useful because the compressed data itself will depend on the contents of the actual data. |
|
May 3 |
revised |
Confidentiality without Encryption - A way to circumvent Internet censorship edited body |
|
May 3 |
comment |
Confidentiality without Encryption - A way to circumvent Internet censorship @lynks if I understand correctly, in mixmaster the person sniffing the traffic can still read the email since it is all in one big chunk. Only the attacker won't be able to relate the email to the sender. In the Rivest paper above, the attacker can't recover the plaintext (from the plaintext) because there will be so much noise in it and without the MAC key the attacker don't know which one is noise and which one isn't. |
|
May 3 |
awarded | Student |
|
May 3 |
asked | Confidentiality without Encryption - A way to circumvent Internet censorship |
|
May 2 |
answered | How to know what domains other clients visit if I have no access to the router? |
|
May 1 |
awarded | Critic |
