746 reputation
612
bio website adamcaudill.com
location VA, USA
age 33
visits member for 4 years, 2 months
seen 4 hours ago

Software developer & architect, security researcher, technical elitist.


Jul
25
awarded  Constituent
Jul
21
awarded  Caucus
Apr
19
comment how to separate arguments in sql query
It would be useful to know what the DBMS is, as that could impact the options available.
Apr
9
comment TLS 39 month certificate limit and Chrome's NET::ERR_CERT_VALIDITY_TOO_LONG error
Chrome's logic for calculating number of months is fairly simple, though it does round up for extra days. So, yours would calculate to 40 months. chromium.googlesource.com/chromium/src/+/master/net/cert/…
Feb
18
awarded  Commentator
Feb
18
comment Unidentified contents injected in include file
Here's a slightly more readable version of the code: gist.github.com/adamcaudill/f042bf6aa45cab3c18d4
Oct
18
comment Can BadUsb only be delivered via USB?
At least for Phison based devices (around half of devices), as long as an attacker has Administrator/root privileges, they would be able to place the device in boot mode and update the firmware. Local or remote doesn't matter.
Oct
18
comment Can BadUsb only be delivered via USB?
At least for Phison controllers (about half of devices), there's a boot image that loads the firmware from NAND and executes it; it's that boot image that should perform validation - it's likely this check isn't done to improve performance. The host PC has no idea what's executing on the drive - that's what makes this technique so effective.
Sep
30
awarded  Explainer
May
23
awarded  Yearling
Apr
14
awarded  Nice Answer
Jul
7
revised Changing User Account Type - User to Guest - File Deleted
formatting
Jul
7
suggested approved edit on Changing User Account Type - User to Guest - File Deleted
Jul
7
comment Assuming no MITM, is Gmail communication 100% secure and private?
Wildcard certificates are in fact still available from CAs, though they are highly restricted (either with technical or contractual controls to prevent abuse [in theory at least]).
May
23
awarded  Yearling
Apr
10
awarded  Enthusiast
Apr
8
comment Use additional “password” in Referer to hide private site?
This method has been used on a number of 'underground' sites for years; legit looking site, but with a specific referer on a certain page, you get access to the real site.
Apr
6
awarded  Enlightened
Apr
6
awarded  Nice Answer
Apr
3
answered How general should a vulnerability be to be eligible for a CVE?