586 reputation
1718
bio website martin-thoma.de
location Karlsruhe, Germany
age 25
visits member for 3 years, 10 months
seen 4 hours ago

I have also a blog.


4h
awarded  Good Question
10h
awarded  Notable Question
1d
awarded  Nice Question
1d
awarded  Popular Question
1d
asked Can attackers get anything with DoS attacks except crashing the service?
May
8
comment Is there any protection against malicious devices on a CAN bus?
I thought an "intermediate device" developed by the car manufacturer could prevent this kind of attack. That means the access to the CAN bus gets controlled by a device between each "foreign" device and the CAN bus. This intermediate device would not do much. It would only check if the device sends its identifier and eventually if it sends too many packages. The intermediate device should have the possibility to cut the access to the CAN bus. Isn't that an efficient way of securing the CAN bus against this simple attack?
May
7
asked Is there any protection against malicious devices on a CAN bus?
Mar
21
comment Is it possible to set up a second router with the same SSID to get the password?
I skipped thorugh some wikipedia articles. It seems as if the router sends a text to the client called "challenge". The client encrypts the challenge with the secret key and a public, symmetric algorithm (AES?). The router compares the encrypted challenge with what it should be. If this is correct, they are connected. My attack does not work as it is hard to get the key given the challenge and the encrypted challenge. Right?
Mar
21
comment Is it possible to set up a second router with the same SSID to get the password?
Why should these setting matter? The person owning the router could change them and the people who connect to it are still able to connect.
Mar
21
asked Is it possible to set up a second router with the same SSID to get the password?
Mar
9
comment Why do phones have SIM cards?
@Aki: I don't understand your argument. Smartphones always have persistant storage. It does not need a SIM card for it. Changing the operator without a SIM should work in concept just like logging in to your Google Account with your phone. This isn't a problem either. The advantage of not having a physical SIM card are: You don't need to have that in hardware. This makes the phone more robust, you can use that space for other stuff (e.g. more storage), every phone could have any number of operators (you want 3 different operators? no problem), SIM card can't break.
Mar
6
revised Why do phones have SIM cards?
sim -> SIM; first letter of question should be capital.
Mar
6
suggested approved edit on Why do phones have SIM cards?
Mar
6
awarded  Investor
Mar
6
comment Why do phones have SIM cards?
@Aki I don't know what stickman thought, but (from my limited knowledge about SIM cards / mobile networks) I would guess that you could get the identification keys sent via Email / post and load an app of the provider to connect to their network. No need to have a built-in SIM and seemingly no need for physical SIM cards.
Jan
16
comment Which security measures does PyPI and similar third-party software repositories take?
Downloading the source code and checking it is not realistic. Think of numpy / scipy. They are HUGE. It would take me weeks to check them. I could, of course, check "easy" malware checks like grepping for 'http' to check if they call websites, but I guess (hope) there are more sophisticated automatic ways to check packages.
Jan
16
asked Which security measures does PyPI and similar third-party software repositories take?
Dec
20
awarded  Yearling
Nov
6
awarded  Good Question
Sep
24
awarded  Popular Question