224 reputation
15
bio website
location
age
visits member for 2 years, 11 months
seen Jul 7 at 9:22

Apr
28
revised What is the most hardened set of options for GCC compiling C/C++?
Updated explanations with information from comments
Apr
28
comment What is the most hardened set of options for GCC compiling C/C++?
@user7610, thanks, updated.
Apr
28
suggested suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Mar
19
revised Does Facebook store plain-text passwords?
Added explanation link to SOUNDEX
Mar
19
suggested suggested edit on Does Facebook store plain-text passwords?
Mar
7
revised Debugging and DLL-Injection
Cleanup, minor formatting
Mar
7
revised Firewall says that a program that I'm developing is trying to connect to the Internet
iow -> in other words, sth -> something.
Mar
7
suggested suggested edit on Debugging and DLL-Injection
Mar
7
suggested suggested edit on Firewall says that a program that I'm developing is trying to connect to the Internet
Mar
3
revised What is the most hardened set of options for GCC compiling C/C++?
Clarified difference between -fstack-protector and -fstack-protector-all. Added Wconversion does not imply Wsign-conversion with C++. Link to formatsecurity explanation.
Mar
3
awarded  Excavator
Mar
3
suggested suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Mar
3
revised What is the most hardened set of options for GCC compiling C/C++?
Added some metadata / explanation links. Added link to ftrapv bug
Mar
3
revised Bypass va_randomize_space and stack-protector
Added link to underflow
Mar
3
comment Bypass va_randomize_space and stack-protector
Note that -fstack-protector only applies to functions with character arrays. You need -fstack-protector-all to guarantee guards are applied to all functions.
Mar
3
suggested suggested edit on Bypass va_randomize_space and stack-protector
Mar
3
comment What is the most hardened set of options for GCC compiling C/C++?
Nice answer. I tried to add explanation links for the more obscure options (-z relro & -z now). Can you explain why arch x86_64 is "important for" ASLR? 32bit apps can have ASLR.
Mar
3
suggested suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Feb
18
comment Securing an IIS application with a complex configuration
In 2), are you trying to decrypt data in DPAPI that was encrypted with a different user's credentials?
Feb
18
revised Where do you store your personal private GPG key?
Added link to paperbak on github