224 reputation
16
bio website
location
age
visits member for 3 years, 11 months
seen Jul 30 at 8:35

Jul
21
awarded  Caucus
Jul
6
comment Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?
@bishop What is a threat theater? A collection of potentially unsecured hosts/routers/switches?
Apr
28
revised What is the most hardened set of options for GCC compiling C/C++?
Updated explanations with information from comments
Apr
28
comment What is the most hardened set of options for GCC compiling C/C++?
@user7610, thanks, updated.
Apr
28
suggested approved edit on What is the most hardened set of options for GCC compiling C/C++?
Mar
19
revised Does Facebook store plain-text passwords?
Added explanation link to SOUNDEX
Mar
19
suggested approved edit on Does Facebook store plain-text passwords?
Mar
7
revised Debugging and DLL-Injection
Cleanup, minor formatting
Mar
7
revised Firewall says that a program that I'm developing is trying to connect to the Internet
iow -> in other words, sth -> something.
Mar
7
suggested approved edit on Debugging and DLL-Injection
Mar
7
suggested approved edit on Firewall says that a program that I'm developing is trying to connect to the Internet
Mar
3
revised What is the most hardened set of options for GCC compiling C/C++?
Clarified difference between -fstack-protector and -fstack-protector-all. Added Wconversion does not imply Wsign-conversion with C++. Link to formatsecurity explanation.
Mar
3
awarded  Excavator
Mar
3
suggested approved edit on What is the most hardened set of options for GCC compiling C/C++?
Mar
3
revised What is the most hardened set of options for GCC compiling C/C++?
Added some metadata / explanation links. Added link to ftrapv bug
Mar
3
revised Bypass va_randomize_space and stack-protector
Added link to underflow
Mar
3
comment Bypass va_randomize_space and stack-protector
Note that -fstack-protector only applies to functions with character arrays. You need -fstack-protector-all to guarantee guards are applied to all functions.
Mar
3
suggested approved edit on Bypass va_randomize_space and stack-protector
Mar
3
comment What is the most hardened set of options for GCC compiling C/C++?
Nice answer. I tried to add explanation links for the more obscure options (-z relro & -z now). Can you explain why arch x86_64 is "important for" ASLR? 32bit apps can have ASLR.
Mar
3
suggested approved edit on What is the most hardened set of options for GCC compiling C/C++?