Reputation
3,327
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 8 22
Newest
 Constituent
Impact
~241k people reached

Jun
26
comment How to properly anonymize data, if hashing isn't enough?
@D.W. your edit was perfect.
Jun
25
asked How to properly anonymize data, if hashing isn't enough?
May
15
reviewed Approve Leading injection
May
15
reviewed Approve Is sqlmap traceable?
May
6
comment Password protected zip opened in notepad
When did you create that .zip file? Did you use strong password or it was a time when you knew little and just used lowercase letters? If so, try bruteforcing it with some program like FZC. In modern computers, weak passwords are easily cracked.
Apr
30
reviewed Approve Is the HTTP TRACE method a security vulnerability?
Apr
28
reviewed Approve Can I determine a private key given the encrypted data and corresponding cleartext?
Apr
24
comment What makes it illegal to use the information learned by exploiting a bug?
@myq depends on where you live.
Apr
15
comment I need two separate hidden volumes in disk encryption. What are my options?
@superuser :) take care when doing things "for fun" in security realms. You might end up without your data or without security...
Apr
8
answered Fixing security issues without boss/client's authorisation
Apr
2
revised Why do banking websites always log you out after inactivity?
deleted 34 characters in body
Apr
1
comment Is it possible to completely wipe a flash memory?
You can take a look at this procedures (draft): csrc.nist.gov/publications/drafts/800-88-rev1/…
Mar
20
reviewed Approve What needs to be focused on when hardening a LAMP stack?
Feb
10
comment How to hide the sensitive data from the developer of the application and the DBA of the database
which database are you using ?
Feb
7
answered Way for two parties to establish that they are not previously known to each other
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@ClayFreeman if you're worried that someone can take you RAM module out, also consider that he can stick some wires and chips and read all data signals traveling between CPU and RAM. If data is encrypted inside RAM chips, but is decrypted when leaves the chip and goes "on plain" on your motherboard, there's almost no advantage in having RAM encrypted.
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@ClayFreeman :) good luck, and tell us if you find other solutions. And just take care on which side your concentrating your efforts: in general, attacks come from online (due to soft bugs and misconfigurations) and from inside job. Stealing hardware just leaves too many traces.
Jan
22
reviewed Approve Is it possible to prevent a physical attack on full disk encryption?
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@ThomasPornin perhaps something like en.wikipedia.org/wiki/PrivateCore
Jan
22
revised Is it possible to prevent a physical attack on full disk encryption?
added 1708 characters in body