208 reputation
19
bio website google.com
location Washington, United States
age 30
visits member for 2 years, 11 months
seen May 28 at 21:49

We are what we repeatedly do. Excellence, then, is not an act but a habit


Feb
23
awarded  Yearling
Dec
7
comment Security of email
@loveright fwiw the accepted answer is technically wrong (or if you prefer, incomplete)
Dec
7
comment Security of email
Hotmail does not support StartTLS for mail transport, so the correct answer is "no" and "define common" respectively. en.m.wikipedia.org/wiki/STARTTLS#section_3
Sep
27
comment Stack Overflows - Defeating Canaries, ASLR, DEP, NX
+1 for solving the actual problem (programming languages which permit overflows to happen). You might want to mention that many scripting languages (looking at you, Python) have modules written in C for performance, especially modules which deal with the network (and therefore are potentially exposed to overflow)
Aug
30
comment Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it?
This answer basically says "hash functions are one-way because hash functions are one way". You might want to give a more rigorous mathematical explanation of how a hash function works to better describe the why of this fact.
May
10
comment Is there any security risk in storing hashed variations of passwords?
Facebook does this, and for exactly that reason: labnol.org/internet/facebook-account-passwords/21241 @Ladadadada to fix this, just salt all passwords with lowercase letters before capping/hashing
Mar
23
comment Is it trivial to bypass IP blocking?
@R4D4 I'm saying that if you get your IP blocked you can do that (possibly spoofing the external MAC, which most home routers support (and in some cases support RESTfully, so you can script it)) in order to bypass the block. I figured the YMMV was implied :)
Mar
22
comment Is it trivial to bypass IP blocking?
Home users: ip release/renew on their WAN link.
Mar
12
awarded  Critic
Mar
12
comment Is it safe to install malware in a VM
Solid points, the question is really about experience though, not so much about the theory
Mar
12
comment Is it safe to install malware in a VM
@Ladadadada My point (which granted I didn't explicitly state...) was that I have seen malware in the wild based on that prototype, rather a lot of it in fact. It's very subtle, but it very definitely exists. Apparently, YMMV...
Mar
9
comment Is it safe to install malware in a VM
You don't see any benefit from being able to escape from a VM and infect the host OS? Considering that many people are using VMs to browse unsafe sites on their main machines, and the VMs don't have sensitive information but the hosts do? One step more evil, my friend...
Mar
9
comment Is it safe to install malware in a VM
immunityinc.com/documentation/cloudburst-vista.html
Feb
16
comment Large lan party : How to identify the users on the network?
It sounds like what you want is Cisco DHCP snooping and dynamic ARP inspection cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/…
Feb
15
comment Large lan party : How to identify the users on the network?
I assume he means the host firewall logs on individual systems
Feb
15
comment Large lan party : How to identify the users on the network?
FYI, 802.3x is flow control, you mean 802.1x en.wikipedia.org/wiki/Ethernet_flow_control en.wikipedia.org/wiki/IEEE_802.1X
Feb
13
answered Writing a sample virus (not harmful)
Feb
7
answered References to issues of putting backdors into opensource (like OpenBSD) by FBI or CIA
Feb
1
comment How does hacking work?
I respectfully disagre with your argument that exist anymore. The developer needs to remember to wrap every single user input, which is a non-trivial exercise if they're not used to doing so. darkreading.com/database-security/167901020/security/…
Jan
25
comment If a hacker were to compromise a GMail database
GMail doesn't use a "database" in the traditional sense, email data is stored in BigTable static.googleusercontent.com/external_content/untrusted_dlcp/…