11,333 reputation
12165
bio website vennard.org.uk
location United Kingdom
age 24
visits member for 2 years, 1 month
seen 8 hours ago
stats profile views 412

I am a software engineer by profession and a mathematics undergraduate in the evenings. I am generally interested in operating systems. My corner of the web is here and you might be interested in code I have written.

I am a Thomas Pornin Certified™ French Speaker.

Questions? You can get in touch via my first name @ my domain name.


May
21
reviewed Approve suggested edit on Routable Domain for DC?
May
19
comment Designing a Sandbox for Windows
@Maarten that's correct, patchguard is only a 64-bit thing. It has also been circumvented in almost all of its implementations, but you'd need someone more skilled than I am to do it :) But yes, you can hook ISRs on 32-bit. I'd be tempted to hook on several levels, because a COM call for example might make more sense filter-wise than a series of syscalls. Just work on the basis the userland hooks might not be reliable. The other issue with any hook is speed, of course - you have to be careful not to slow things down too much with your checking stage.
May
18
reviewed Approve suggested edit on Can a windows phone be traced without a SIM and battery
May
17
reviewed Leave Open Does escaping quotes protect me from SQL injection?
May
17
reviewed Close Win7 Delete Files Record?
May
17
reviewed Close Install Metasploit under Cygwin?
May
17
awarded  linux
May
16
comment Does glibc2 version of the crypt function still use DES for alternative hashing methods?
@VilhelmGray yep. MD5(pass+salt) will just be an array of bytes, e.g. uint8_t arr[20]; (adjust 20 for bits/8) and the encoded version will be too, just modified so that each byte is printable. Technically, you could just store it in the file unprintable (what you might call a binary file) but Unix configuration has always traditionally used readable text files.
May
16
comment Does glibc2 version of the crypt function still use DES for alternative hashing methods?
@VilhelmGray I imagine they encoded the hash value in a range of printable characters. It looks like BASE64 but I could be wrong. Either way, encoding in just 0-9,A-F requires two bytes per byte of actual data and is therefore quite expensive to use.
May
16
answered Does glibc2 version of the crypt function still use DES for alternative hashing methods?
May
16
answered Designing a Sandbox for Windows
May
16
comment Designing a Sandbox for Windows
@Maarten I had a go at piecing together how it works. It was a while ago and is not by any means complete, however: security.stackexchange.com/questions/3861/…
May
16
comment Designing a Sandbox for Windows
Just for your info, in the future it might. VMWare currently let you emulate VT-x, so you can run their ESX product on workstation. It's slow as hell, but conceivable you could do it. This will probably improve in the future...
May
15
awarded  Nice Answer
May
14
reviewed Close What are some signs that a certain degree in information security will be a quality one?
May
14
reviewed Close File uploader: Does renaming protect from exploitation
May
14
reviewed Close How IP address are traced
May
14
reviewed Close Can particular object be detected and extracted from RAM?
May
14
reviewed Close How can I send and receive untraceable emails?
May
14
reviewed Close Virus with PGP Encryption Preventing Virus Scan