774 reputation
1919
bio website martin-thoma.de
location Karlsruhe, Germany
age 25
visits member for 4 years
seen Jul 21 at 15:42

I have also a blog.


Jul
14
awarded  Caucus
Jun
29
awarded  Notable Question
Jun
4
comment Attack vector, attack surface, vulnerability, exploit: Where is the difference?
So the attack vector might be "sql injection" and the exploit is then the browser? I thought in case of sql injections the exploit would be "unsantized user data" or something like this?
Jun
4
asked Attack vector, attack surface, vulnerability, exploit: Where is the difference?
May
29
awarded  Yearling
May
29
accepted Can attackers get anything with DoS attacks except crashing the service?
May
28
awarded  Good Question
May
28
awarded  Notable Question
May
27
awarded  Nice Question
May
27
awarded  Popular Question
May
27
asked Can attackers get anything with DoS attacks except crashing the service?
May
8
comment Is there any protection against malicious devices on a CAN bus?
I thought an "intermediate device" developed by the car manufacturer could prevent this kind of attack. That means the access to the CAN bus gets controlled by a device between each "foreign" device and the CAN bus. This intermediate device would not do much. It would only check if the device sends its identifier and eventually if it sends too many packages. The intermediate device should have the possibility to cut the access to the CAN bus. Isn't that an efficient way of securing the CAN bus against this simple attack?
May
7
asked Is there any protection against malicious devices on a CAN bus?
Mar
21
comment Is it possible to set up a second router with the same SSID to get the password?
I skipped thorugh some wikipedia articles. It seems as if the router sends a text to the client called "challenge". The client encrypts the challenge with the secret key and a public, symmetric algorithm (AES?). The router compares the encrypted challenge with what it should be. If this is correct, they are connected. My attack does not work as it is hard to get the key given the challenge and the encrypted challenge. Right?
Mar
21
comment Is it possible to set up a second router with the same SSID to get the password?
Why should these setting matter? The person owning the router could change them and the people who connect to it are still able to connect.
Mar
21
asked Is it possible to set up a second router with the same SSID to get the password?
Mar
9
comment Why do phones have SIM cards?
@Aki: I don't understand your argument. Smartphones always have persistant storage. It does not need a SIM card for it. Changing the operator without a SIM should work in concept just like logging in to your Google Account with your phone. This isn't a problem either. The advantage of not having a physical SIM card are: You don't need to have that in hardware. This makes the phone more robust, you can use that space for other stuff (e.g. more storage), every phone could have any number of operators (you want 3 different operators? no problem), SIM card can't break.
Mar
6
revised Why do phones have SIM cards?
sim -> SIM; first letter of question should be capital.
Mar
6
suggested approved edit on Why do phones have SIM cards?
Mar
6
awarded  Investor