222 reputation
15
bio website
location
age
visits member for 2 years, 7 months
seen Apr 14 at 15:48

Mar
19
revised Does Facebook store plain-text passwords?
Added explanation link to SOUNDEX
Mar
19
suggested suggested edit on Does Facebook store plain-text passwords?
Mar
7
revised Debugging and DLL-Injection
Cleanup, minor formatting
Mar
7
revised Firewall says that a program that I'm developing is trying to connect to the Internet
iow -> in other words, sth -> something.
Mar
7
suggested suggested edit on Debugging and DLL-Injection
Mar
7
suggested suggested edit on Firewall says that a program that I'm developing is trying to connect to the Internet
Mar
3
revised What is the most hardened set of options for GCC compiling C/C++?
Clarified difference between -fstack-protector and -fstack-protector-all. Added Wconversion does not imply Wsign-conversion with C++. Link to formatsecurity explanation.
Mar
3
awarded  Excavator
Mar
3
suggested suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Mar
3
revised What is the most hardened set of options for GCC compiling C/C++?
Added some metadata / explanation links. Added link to ftrapv bug
Mar
3
revised Bypass va_randomize_space and stack-protector
Added link to underflow
Mar
3
comment Bypass va_randomize_space and stack-protector
Note that -fstack-protector only applies to functions with character arrays. You need -fstack-protector-all to guarantee guards are applied to all functions.
Mar
3
suggested suggested edit on Bypass va_randomize_space and stack-protector
Mar
3
comment What is the most hardened set of options for GCC compiling C/C++?
Nice answer. I tried to add explanation links for the more obscure options (-z relro & -z now). Can you explain why arch x86_64 is "important for" ASLR? 32bit apps can have ASLR.
Mar
3
suggested suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Feb
18
comment Securing an IIS application with a complex configuration
In 2), are you trying to decrypt data in DPAPI that was encrypted with a different user's credentials?
Feb
18
revised Where do you store your personal private GPG key?
Added link to paperbak on github
Feb
18
comment Where do you store your personal private GPG key?
+1. Paper in a safe. Delightfully simple.
Feb
18
suggested suggested edit on Where do you store your personal private GPG key?
Feb
14
revised RESTful API URLs and Denial Of Service attacks
added 262 characters in body