Reputation
2,640
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
8 18
Newest
 Yearling
Impact
~174k people reached

2d
reviewed Reject Are SHA-2 certificates considered obsolete, or current?
Apr
27
awarded  Yearling
Apr
22
comment Default accounts shutdown, halt, and sync - still shipping?
Yes they still ship. This answer my help explain why unix.stackexchange.com/questions/197124/…
Apr
18
reviewed Approve How does SSL/TLS work?
Mar
21
reviewed Approve Better alternative to WAF path whitelisting?
Feb
25
reviewed Approve Is this a self rolled hashing/obfuscation method? Can you recognize the pattern?
Jan
14
reviewed Approve Public Key Encryption instead of passwords
Jan
12
awarded  Nice Question
Jan
11
comment Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report
Neil understood, any discussions in your circles of StackExchange hosting a chatty security site for questions more complex than why one need not hide the password salt? I'm serious and appreciate your concern.
Jan
11
reviewed Approve Why PHP password_hash does use blowfish intstead threefish?
Jan
11
asked Should the risk of antivirus products be reconsidered in light of the TrendMicro critical bug report
Jan
6
comment Copy-and-pasting plaintext data from encrypted container
If the attacker has privileged access there are many paths to exploitation. As you suggest, this one would probably be much less reliable than others as it requires the user to act in a specific fashion at an unspecified time. My guess is such an attacker would be focused on keylogging or unencrypted interprocess communications related to authentication.
Jan
5
comment Copy-and-pasting plaintext data from encrypted container
AlexH references provide the answer. Sadly it's not the one for which you hope. The OS (each differently) has many processes interacting and sharing data and access to include access to the paste buffer. This is not simple clear of a single OS buffer action. In times past Adobe manhandled the shared OS paste buffer to aid in making their PDF reader read only (prevent cut and paste access by filling the paste buffer even though the app did not let the user access it). That action can have unintended consequences for other programs (all should play friendly with shared resources).
Jan
5
comment Copy-and-pasting plaintext data from encrypted container
Consider if anything prior to the decryption matters, I don't believe it does thus the source provides no protection. If a user is moving plain text between processes of an OS then the paste buffer of the OS is used (and seldom cleared) plus the browser paste buffer API is engaged. Sensitive plain text is dribbled about with a feature set not designed to secure that data. AlexH comment and answer below suggest the problems from that point on.
Dec
30
comment Directory traversal sample code
Is 'logs' a file or a directory? If it is a directory I would add a final slash (%2F) to see if that resolves your issues.
Dec
24
comment File encryption on a solid state drive
OpenSSL is in the title and tag but seems to be missing from the body of your question. Consider updating to address OpenSSLs role in your query.
Dec
23
revised Script / method to erase USB flash drive content after a certain number of uses
deleted 19 characters in body
Dec
23
answered Script / method to erase USB flash drive content after a certain number of uses
Dec
18
answered Should I be concerned that Google no longer trusts specific Symantec root CA cert that is also on my Windows system?
Dec
16
reviewed Approve Why is it important to apply security best practices when the risk they protect against is very low?