716 reputation
510
bio website adamcaudill.com
location VA, USA
age 32
visits member for 3 years, 6 months
seen Nov 23 at 7:29

Software developer & architect, security researcher, technical elitist.


Oct
18
comment Can BadUsb only be delivered via USB?
At least for Phison based devices (around half of devices), as long as an attacker has Administrator/root privileges, they would be able to place the device in boot mode and update the firmware. Local or remote doesn't matter.
Oct
18
comment Can BadUsb only be delivered via USB?
At least for Phison controllers (about half of devices), there's a boot image that loads the firmware from NAND and executes it; it's that boot image that should perform validation - it's likely this check isn't done to improve performance. The host PC has no idea what's executing on the drive - that's what makes this technique so effective.
Sep
30
awarded  Explainer
May
23
awarded  Yearling
Apr
14
awarded  Nice Answer
Jul
7
revised Changing User Account Type - User to Guest - File Deleted
formatting
Jul
7
suggested suggested edit on Changing User Account Type - User to Guest - File Deleted
Jul
7
comment Assuming no MITM, is Gmail communication 100% secure and private?
Wildcard certificates are in fact still available from CAs, though they are highly restricted (either with technical or contractual controls to prevent abuse [in theory at least]).
May
23
awarded  Yearling
Apr
10
awarded  Enthusiast
Apr
8
comment Use additional “password” in Referer to hide private site?
This method has been used on a number of 'underground' sites for years; legit looking site, but with a specific referer on a certain page, you get access to the real site.
Apr
6
awarded  Enlightened
Apr
6
awarded  Nice Answer
Apr
3
answered How general should a vulnerability be to be eligible for a CVE?
Apr
3
answered Man-in-the-middle scenario for TLS
Apr
2
comment How Do I find Out the Username And Password Of Wifi Windows 7?
Cross-posted to SU: superuser.com/questions/576627/…
Apr
2
comment VPN using SmartPhone Location
Seems to be cross-posted to SU: superuser.com/questions/576629/vpn-location-with-smartphone
Apr
2
answered VPN using SmartPhone Location
Apr
2
answered What do I need to do to secure log-in and registration for my website?
Apr
1
answered Why improvising your own Hash function out of existing hash functions is so bad