Reputation
2,601
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
7 18
Impact
~163k people reached

Jan
14
reviewed Approve Public Key Encryption instead of passwords
Jan
12
awarded  Nice Question
Jan
11
comment Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report
Neil understood, any discussions in your circles of StackExchange hosting a chatty security site for questions more complex than why one need not hide the password salt? I'm serious and appreciate your concern.
Jan
11
reviewed Approve Why PHP password_hash does use blowfish intstead threefish?
Jan
11
asked Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report
Jan
6
comment Copy-and-pasting plaintext data from encrypted container
If the attacker has privileged access there are many paths to exploitation. As you suggest, this one would probably be much less reliable than others as it requires the user to act in a specific fashion at an unspecified time. My guess is such an attacker would be focused on keylogging or unencrypted interprocess communications related to authentication.
Jan
5
comment Copy-and-pasting plaintext data from encrypted container
AlexH references provide the answer. Sadly it's not the one for which you hope. The OS (each differently) has many processes interacting and sharing data and access to include access to the paste buffer. This is not simple clear of a single OS buffer action. In times past Adobe manhandled the shared OS paste buffer to aid in making their PDF reader read only (prevent cut and paste access by filling the paste buffer even though the app did not let the user access it). That action can have unintended consequences for other programs (all should play friendly with shared resources).
Jan
5
comment Copy-and-pasting plaintext data from encrypted container
Consider if anything prior to the decryption matters, I don't believe it does thus the source provides no protection. If a user is moving plain text between processes of an OS then the paste buffer of the OS is used (and seldom cleared) plus the browser paste buffer API is engaged. Sensitive plain text is dribbled about with a feature set not designed to secure that data. AlexH comment and answer below suggest the problems from that point on.
Dec
30
comment Directory traversal sample code
Is 'logs' a file or a directory? If it is a directory I would add a final slash (%2F) to see if that resolves your issues.
Dec
24
comment File encryption on a solid state drive
OpenSSL is in the title and tag but seems to be missing from the body of your question. Consider updating to address OpenSSLs role in your query.
Dec
23
revised Script / method to erase USB flash drive content after a certain number of uses
deleted 19 characters in body
Dec
23
answered Script / method to erase USB flash drive content after a certain number of uses
Dec
18
answered Should I be concerned that Google no longer trusts specific Symantec root CA cert that is also on my Windows system?
Dec
16
reviewed Approve Why is it important to apply security best practices when the risk they protect against is very low?
Dec
10
comment Can letting anyone create Dockerfiles result in RCE?
If you used DockerHub to do an automatic build on your GitHub Dockerfile and deployed that DockerHub built image instead then you eliminate the possibilities of a local Dockerfile build accessing system resources directly. Docker is not designed (not yet at least) as a secure solution so there would still be risk but it would be greatly reduced.
Dec
9
answered Can letting anyone create Dockerfiles result in RCE?
Dec
9
reviewed Approve AngularJS - Can a response from an $http.post to PHP be modified?
Dec
7
reviewed Reject Getting files back by paying Ransomware
Nov
25
reviewed Approve How Likely Is It For A Virus To Spread From A Linux VM To The Windows Host
Nov
25
comment How Likely Is It For A Virus To Spread From A Linux VM To The Windows Host
Probably a good plan for further sandboxing your browsing then...