181 reputation
4
bio website
location
age
visits member for 2 years, 10 months
seen yesterday

Jul
20
comment Online Shopping password keylogger risk
if you enter the details on their page then they can access those details, if you are redirected to your bank's site then only the bank can access it and the bank sends a security token
Jul
2
comment A second bank card arrived with the same PIN
they expect you to change it first time you get to an ATM
May
28
comment If a Windows laptop with an encrypted hard disk is stolen, can the contents be accessed by a professional hacker?
unless you take out the disk and mount it on another comp to inspect it
May
28
comment Is it good practice to ban an IP address if too many login attempts are made from it?
@voo then don't allow TCP but enforce HTTPS for log-in
May
19
comment Why can't we do MiTM attacks when using secure connection
and SSL doesn't use ECB block mode so even if you could find the cookie, it depends on the previous data what is actually sent,
May
19
comment What's to stop someone from 3D print cloning a key?
@EricLippert different manufacturers require different side grooves but those can be gotten from either the lock you are trying to break or from the key you are trying to copy
Mar
26
comment Why aren't we all compromised on the internet?
because browsers block ajax for other domains to prevent exactly this, the site needs to explicitly allow it
Feb
27
comment Is it possible to change IP after each request
the last 2 of shared addresses say the same thing (NAT shares addresses).
Feb
12
comment Does (online) poker require cryptographically secure randomness?
in poker the entire order of the deck isn't important; there are "only" (52!)/((52-(5 +2*#players))!5!(2*#players)) possible scenarios in texas hold'em (select 1 group of 5 and #players groups of 2)
Jan
27
comment How did the spammers get this address?
amazon or hackers might have mined the disks on the virtual machines for email addresses, or one of the machines that you used to configure it was compromised. Also don't discount that the sender machine wasn't compromised just because the OS is not a popular target.
Jan
24
comment Why are chips safer than magnetic stripes?
@gerrit a strong magnet corrupts the magnetic stripe, so just diy it :)
Jan
24
comment Why are chips safer than magnetic stripes?
@SoftwareMonkey the device is the input device for the pin you can't hide it from that, to prevent brute force the chip disables itself after 3 tries
Jan
24
comment Why are chips safer than magnetic stripes?
@Jim in Belgium the bank issues a challenge and you need the chip and a special device+PIN to get the response for it
Jan
23
comment Why are chips safer than magnetic stripes?
@thefourtheye erase the mag stripe
Jan
23
comment Why are chips safer than magnetic stripes?
ever put a strong magnet to a stripe?
Oct
14
comment How secure is Android's facial recognition?
if the attacker has time and resources then he'll hack the memory and bypass the facial recognition entirely
Oct
4
comment Can a steel woven wallet prevent RFID scanning of credit card information?
an attacker could set up a RFID receiver nearby a reader to skim of cards being actively read (as in being waved in front of the reader), the only way to protect against that is to surround the reader with a faraday cage and have the user put the RFID card inside to be read
Sep
30
comment Infecting a vehicle with a virus?
with the automatic parallel parking you could set the minimum gap to keep to 0 and block the vehicle behind you from pulling out
Sep
27
comment In C, not using 'void' if a function does not accept any argument is a potential vulnerability
you can go back to the non-safe version if you declared with ... and use the VARARG macros to populate the parameters
Sep
17
comment Popular Security “Cargo Cults”
I'd add another corollary: popular open source is more secure than closed, I could create my own crypt suite and open source it, but that is likely to be insecure because no one would care about it enough to try and improve it