181 reputation
4
bio website
location
age
visits member for 2 years, 6 months
seen 10 hours ago

Mar
26
comment Why aren't we all compromised on the internet?
because browsers block ajax for other domains to prevent exactly this, the site needs to explicitly allow it
Feb
27
comment Is it possible to change IP after each request
the last 2 of shared addresses say the same thing (NAT shares addresses).
Feb
12
comment Does (online) poker require cryptographically secure randomness?
in poker the entire order of the deck isn't important; there are "only" (52!)/((52-(5 +2*#players))!5!(2*#players)) possible scenarios in texas hold'em (select 1 group of 5 and #players groups of 2)
Jan
27
comment How did the spammers get this address?
amazon or hackers might have mined the disks on the virtual machines for email addresses, or one of the machines that you used to configure it was compromised. Also don't discount that the sender machine wasn't compromised just because the OS is not a popular target.
Jan
24
comment Why are chips safer than magnetic stripes?
@gerrit a strong magnet corrupts the magnetic stripe, so just diy it :)
Jan
24
comment Why are chips safer than magnetic stripes?
@SoftwareMonkey the device is the input device for the pin you can't hide it from that, to prevent brute force the chip disables itself after 3 tries
Jan
24
comment Why are chips safer than magnetic stripes?
@Jim in Belgium the bank issues a challenge and you need the chip and a special device+PIN to get the response for it
Jan
23
comment Why are chips safer than magnetic stripes?
@thefourtheye erase the mag stripe
Jan
23
comment Why are chips safer than magnetic stripes?
ever put a strong magnet to a stripe?
Oct
14
comment How secure is Android's facial recognition?
if the attacker has time and resources then he'll hack the memory and bypass the facial recognition entirely
Oct
4
comment Can a steel woven wallet prevent RFID scanning of credit card information?
an attacker could set up a RFID receiver nearby a reader to skim of cards being actively read (as in being waved in front of the reader), the only way to protect against that is to surround the reader with a faraday cage and have the user put the RFID card inside to be read
Sep
30
comment Infecting a vehicle with a virus?
with the automatic parallel parking you could set the minimum gap to keep to 0 and block the vehicle behind you from pulling out
Sep
27
comment In C, not using 'void' if a function does not accept any argument is a potential vulnerability
you can go back to the non-safe version if you declared with ... and use the VARARG macros to populate the parameters
Sep
17
comment Popular Security “Cargo Cults”
I'd add another corollary: popular open source is more secure than closed, I could create my own crypt suite and open source it, but that is likely to be insecure because no one would care about it enough to try and improve it
Sep
13
comment Is there symmetric encryption like AES or Camelia with keys longer than 256 bits?
256 bit AES in a EDE chain is trivially 768 bits
Aug
9
comment Security behind the windows 8 eye
any other normal password field also keeps the password in plain text in memory ready for the code to query it, all the eye does is turn off the masking so it gets echo on screen
Jul
18
comment Is it acceptable that a skilled professional pentester deletes or modifies sensitive data in production unintentionally during a pentest?
you can put the test clone in a throttled VM if hardware is tight. this way when it grinds to a halt it only grinds with 25% of CPU and prod still has 75 to play with
Jul
11
comment How exactly is MD5 vulnerable to collission attacks?
the vector is really apparent when the attacker can control both versions (the one the victim wants that has been vetted and signed by a third party and the one the attacker wants the victim to have)
May
30
comment Once VPN is unplugged can work still monitor?
can some router models connect to a VPN and act as a full MiM?
May
30
comment Do I really need an Anti-Virus software if I'm careful about where I browse?
security.SE is a better fit for this (they have better people to answer), also sites can become malware carriers overnight (even while you browse)