2,860 reputation
519
bio website
location Curitiba, Brazil
age 35
visits member for 2 years, 9 months
seen Apr 15 at 14:58

Computer analyst


Apr
15
comment I need two separate hidden volumes in disk encryption. What are my options?
@superuser :) take care when doing things "for fun" in security realms. You might end up without your data or without security...
Apr
1
comment Is it possible to completely wipe a flash memory?
You can take a look at this procedures (draft): csrc.nist.gov/publications/drafts/800-88-rev1/…
Feb
10
comment How to hide the sensitive data from the developer of the application and the DBA of the database
which database are you using ?
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@ClayFreeman if you're worried that someone can take you RAM module out, also consider that he can stick some wires and chips and read all data signals traveling between CPU and RAM. If data is encrypted inside RAM chips, but is decrypted when leaves the chip and goes "on plain" on your motherboard, there's almost no advantage in having RAM encrypted.
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@ClayFreeman :) good luck, and tell us if you find other solutions. And just take care on which side your concentrating your efforts: in general, attacks come from online (due to soft bugs and misconfigurations) and from inside job. Stealing hardware just leaves too many traces.
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
@ThomasPornin perhaps something like en.wikipedia.org/wiki/PrivateCore
Jan
22
comment Is it possible to prevent a physical attack on full disk encryption?
Ok. Given your comment, I'm updating my answer.
Jan
21
comment Is it possible to prevent a physical attack on full disk encryption?
Got it. But, well, for what you asked, I think that any answer would go about the physical aspect of it. If you're thinking about protect one VPS from another using disk encryption, perhaps you're going on the wrong way. If you'd like to chat about it, tell me and I'll be in the chat room.
Dec
9
comment How to destroy VOIP phone in a proper way?
I'm pretty sure fire will destroy it, if set hot enough and long enough. :)
Nov
25
comment How to keep Mac secure from viruses, malware and keyloggers?
hum, and isn't that what I answered in the first two paragraphs???
Nov
25
comment How to keep Mac secure from viruses, malware and keyloggers?
if he did ask about security holes explitable by 3rd parts, I would agree with you. He asked about software that comes with keyloggers, virus...
Oct
24
comment Are the SS64.com password generators a good approach?
Those passwords will fail on those sites that require at least one symbol. The Base64 will only represent a-z, A-Z and numbers, since the + and / will be replaced by E and a.
Sep
25
comment Detecting Steganography in images
some "steganography" softwares don't just hide information inside less-significant bits, they append data to the end of the file, or they use fields like "comments" to store the data, or they increase the bits-per-pixel... not good techniques, but they are done.
Sep
23
comment Offloading private key operations to a trusted device
Used javacards few years ago, could make them perform simple tasks, but the time/play fun ratio wasn't good. :)
Sep
20
comment Biometric non revocable major flaw
Yes, some body parts can be glued back... hands, face and even... hum... Bobbit
Sep
11
comment How can you I detect low frequency brute forcing over multiple connections?
sorry, what I meant was against only one login, or against many different logins (even ones that don't exist)? But I already answered, I think
Sep
11
comment How can you I detect low frequency brute forcing over multiple connections?
You mean lots of attempts to one specific login, or to combinations of login/password?
Aug
29
comment Why is password hashing considered so important?
Thanks for your demo!!!!
Aug
26
comment How can I prove that I wrote a certain blog post?
It's possible to study the author writing style and verify, with a certain level of confidence, that the writing style of one author is the same that is found in some published article...
Aug
9
comment Obtaining e-mail address at registration
ops, I'll comment on stackoverflow then...