Reputation
1,154
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 9 18
Newest
 Yearling
Impact
~105k people reached

  • 0 posts edited
  • 2 helpful flags
  • 120 votes cast
Feb
2
comment Is possible to prevent input emulation with SetWindowsHookEx in specific application?
I'm putting this in a comment because being wrong in a comment is MUCH less embarrassing than being wrong in an answer. What about the null hypothesis? If I can show that you can't stop an emulation from happening, then the answer would be that you can't stop everything. SetWindowsHookEx can't detect joystick input. And joystick input can't be blocked. Joystick input via WM_INPUT isn't in the same format as keyboard input anyway, so it doesn't matter whether you use different methods to detect them. What if you create a joystick profile that emulates a keyboard joytokey.net/en
Dec
23
comment How to store passwords written on a physical notebook?
@schroeder The purpose of the history is to demonstrate: we knew what rule number one was 55 years ago. We've spent 55 years violating it, and teaching people to violate it. So now, here we are, having a discussion, where we rationalize violating it some more. We are giving bad advice that would make someone liable for using it. That is a fact. So please, keep telling me about how I'm in the wrong.
Dec
23
comment How to store passwords written on a physical notebook?
Imagine for a moment you're sitting in court. You are explaining why you were writing down passwords in this "encrypted" manner. First they put someone on the stand that makes it clear, encryption requires public vetting. They demonstrate the problem with assuming you know encryption (WEP). Then the defense puts on the stand experts that state that people have been told for years "don't write it down." Next come the policies. Is the company going to accept liability for you doing something stupid? Not likely. So, is it my job to help someone do something that is bad in every sense of the word?
Dec
23
comment How to store passwords written on a physical notebook?
@schroeder no, you're right. We should just tell people to write their passwords down. We don't have any evidence that it's a bad idea, and we definitely don't have any evidence that it is entirely different than storing them in an encrypted system that is controlled because it would use encryption that is just as easy to crack. Look up logical fallacy of equivocation.
Dec
23
answered How to store passwords written on a physical notebook?
Dec
22
comment Can an SSL cert/key pair indicate that they need an intermediate
Wait, I just reread this. Are you saying that you are generating an SSL cert from your own certificate authority, and posting it to a public server (hosting provider)? If that is the case, is the certificate authority that you used to create the certificates available in some way for verification? What I mean is, systems are going to try to verify the SSL cert. If your CA created it, can theses systems access your CA for verification? Also, is your CA trusted by their system?
Dec
22
comment Is it possible to Identify a VPN user by finding relations in traffic?
@preston - Having done radio direction finding, I can tell you it only takes minutes. And all th
Dec
22
answered Can an SSL cert/key pair indicate that they need an intermediate
Nov
19
awarded  Yearling
Sep
24
comment What are all the security “services” that can be applied to traffic?
What about quantum encryption (polarization) on layer 1? What about VLANs? They offer security and I don't see where they fall in to your list. What about blacklists? What about whitelists for that matter?
Sep
24
comment What are all the security “services” that can be applied to traffic?
What about authorization?
Sep
24
comment What are all the security “services” that can be applied to traffic?
Eddie, your example is HUGELY flawed. There aren't just four items that can answer that question. There are 65,536 ports for a reason. There are 7 different layers. Encryption can occur on several. All possible methods and services is a HUGE book. When we say it's too much for this format, it is.
Sep
12
awarded  Custodian
Feb
26
awarded  Popular Question
Feb
12
awarded  Nice Question
Feb
11
awarded  Famous Question
Nov
19
awarded  Yearling
Apr
25
awarded  Notable Question
Feb
27
awarded  Popular Question
Nov
19
awarded  Yearling