8,512 reputation
1234
bio website syfuhs.net
location
age
visits member for 3 years, 10 months
seen 13 hours ago

Pain in the neck. Microsoft Developer Security MVP.


12h
reviewed Leave Closed Untraceability of Virtual Machine
13h
reviewed Close Contactless session on ATM?
13h
reviewed Close reading/downloading big files in metasploit module
13h
reviewed Close Full control on cryptography vs relying on external certificate
13h
reviewed Close What are the differences in Linux and Windows security that cause Windows to get so many more viruses?
13h
reviewed Close HMAC based authentification token
13h
reviewed Close Utility to hide several encrypted messages in single file
Sep
12
comment Variable scope and security
@user10008 you're right, I missed the link. My concern was how he was pinning the string in the first place, which he didn't elaborate on, whereas Doug's answer explicitly showed it.
Sep
11
comment Variable scope and security
That SecureString needs to be kept as a SecureString end-to-end within the system, otherwise you hit the same problem as soon as it gets marshaled into a regular string. The provided answer is wrong, but @Doug's answer does a way better job to protect the string.
Sep
6
reviewed Close Can eavesdropping be facilitated by injecting content that will be transmitted?
Sep
6
reviewed Close Is attempting mySQL injection illegal?
Sep
6
reviewed Close how to identify and fight conficker infected computers
Sep
6
reviewed Close What could these messages with blank message and blank body mean?
Sep
6
reviewed Close Honeypot Recommendations
Sep
6
reviewed Close Salt and password
Sep
6
reviewed Close How to check whether firewall allows traffic on specific port but not listening on the port
Sep
6
reviewed Close Question I was asked during a job interview
Sep
6
reviewed Close Cloud security? Boxcryptor?
Sep
6
reviewed Close What hash version is implemented on ThePirateBay.se? SHA-1 or MDA-5?
Sep
6
reviewed Close Salting password