meta user
network profile
| bio | website | vennard.org.uk |
|---|---|---|
| location | United Kingdom | |
| age | 24 | |
| visits | member for | 2 years, 1 month |
| seen | 8 hours ago | |
| stats | profile views | 412 |
I am a software engineer by profession and a mathematics undergraduate in the evenings. I am generally interested in operating systems. My corner of the web is here and you might be interested in code I have written.
I am a Thomas Pornin Certified™ French Speaker.
Questions? You can get in touch via my first name @ my domain name.
|
May 21 |
reviewed | Approve suggested edit on Routable Domain for DC? |
|
May 19 |
comment |
Designing a Sandbox for Windows @Maarten that's correct, patchguard is only a 64-bit thing. It has also been circumvented in almost all of its implementations, but you'd need someone more skilled than I am to do it :) But yes, you can hook ISRs on 32-bit. I'd be tempted to hook on several levels, because a COM call for example might make more sense filter-wise than a series of syscalls. Just work on the basis the userland hooks might not be reliable. The other issue with any hook is speed, of course - you have to be careful not to slow things down too much with your checking stage. |
|
May 18 |
reviewed | Approve suggested edit on Can a windows phone be traced without a SIM and battery |
|
May 17 |
reviewed | Leave Open Does escaping quotes protect me from SQL injection? |
|
May 17 |
reviewed | Close Win7 Delete Files Record? |
|
May 17 |
reviewed | Close Install Metasploit under Cygwin? |
|
May 17 |
awarded | linux |
|
May 16 |
comment |
Does glibc2 version of the crypt function still use DES for alternative hashing methods? @VilhelmGray yep. MD5(pass+salt) will just be an array of bytes, e.g. uint8_t arr[20]; (adjust 20 for bits/8) and the encoded version will be too, just modified so that each byte is printable. Technically, you could just store it in the file unprintable (what you might call a binary file) but Unix configuration has always traditionally used readable text files. |
|
May 16 |
comment |
Does glibc2 version of the crypt function still use DES for alternative hashing methods? @VilhelmGray I imagine they encoded the hash value in a range of printable characters. It looks like BASE64 but I could be wrong. Either way, encoding in just 0-9,A-F requires two bytes per byte of actual data and is therefore quite expensive to use. |
|
May 16 |
answered | Does glibc2 version of the crypt function still use DES for alternative hashing methods? |
|
May 16 |
answered | Designing a Sandbox for Windows |
|
May 16 |
comment |
Designing a Sandbox for Windows @Maarten I had a go at piecing together how it works. It was a while ago and is not by any means complete, however: security.stackexchange.com/questions/3861/… |
|
May 16 |
comment |
Designing a Sandbox for Windows Just for your info, in the future it might. VMWare currently let you emulate VT-x, so you can run their ESX product on workstation. It's slow as hell, but conceivable you could do it. This will probably improve in the future... |
|
May 15 |
awarded | Nice Answer |
|
May 14 |
reviewed | Close What are some signs that a certain degree in information security will be a quality one? |
|
May 14 |
reviewed | Close File uploader: Does renaming protect from exploitation |
|
May 14 |
reviewed | Close How IP address are traced |
|
May 14 |
reviewed | Close Can particular object be detected and extracted from RAM? |
|
May 14 |
reviewed | Close How can I send and receive untraceable emails? |
|
May 14 |
reviewed | Close Virus with PGP Encryption Preventing Virus Scan |
