55,668 reputation
17134229
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 7 months
seen 11 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


11h
comment Panword Checking and Random Checking
Random testing is an actual term - perhaps that's what you meant? "Panword checking" appears to be made up, though. I can't find any references to it on Google.
1d
comment What is the “Moose” worm and how can I protect myself from it?
Keep in mind that the "ShieldsUP service from GRC.com" is a product created by Steve Gibson, who has demonstrated a fantastic lack of understanding of network technologies. He's a salesman and pundit, not a security expert. There are numerous reports that ShieldsUP doesn't actually properly scan ports, and may return both false positives and false negatives.
1d
awarded  Enlightened
1d
awarded  Nice Answer
2d
awarded  Nice Answer
2d
comment Is this way of encoding cryptographic hashes safe?
@apsillers Ah, I see what you're saying - there's a potential for collision between a pair of 3-char and 2-char base62 units where the encoding could be 3-then-2 or 2-then-3.
2d
comment Is this way of encoding cryptographic hashes safe?
That would only be true if ONLY two base62 characters were put into the string regardless of what the three base16 characters encode to. I don't think that's the case though - I think all 3 characters are added and the string gets longer.
2d
comment Is this way of encoding cryptographic hashes safe?
@apsillers My understanding is that they're not truncating each block, but rather concatenating all of that data together, such that there's no loss of information even if you can't trivially identify which ones were 3-char and which ones were 2-char.
2d
answered Is this way of encoding cryptographic hashes safe?
2d
revised Is this way of encoding cryptographic hashes safe?
fixed bullet point
2d
awarded  Enlightened
2d
comment Is it safe to publish some internal IP of my company?
@justarandomguy Right, but you've posted this on Meta Sec.SE, not Sec.SE.
2d
awarded  Nice Answer
2d
comment Can attackers get anything with DoS attacks except crashing the service?
@RoryAlsop Yikes. Sounds ideal!
2d
answered Can attackers get anything with DoS attacks except crashing the service?
2d
comment Why Adobe is recommending McAfee security scan during flash player installation?
@MilchePatern You're talking about the general security of Flash, which is a totally different matter to this specific affiliate marketing campaign. Also, Steve Jobs was a businessman and marketing director, not an engineer or coder - his thoughts on the security of Flash are irrelevant to this particular topic. Even if we were to entertain his opinions, they mostly rely upon the complaint that Flash is proprietary, which again has little bearing on the actual security of the product.
May
27
comment Can I use AES CTR mode to encrypt files with same key and nonce?
@Rak The stuff in my answer.
May
22
comment Can I use AES CTR mode to encrypt files with same key and nonce?
I'm not sure how you're inferring that from the question.
May
22
comment Can I use AES CTR mode to encrypt files with same key and nonce?
If his attack model is that an attacker can't get access to the encrypted data, why encrypt the data in the first place?
May
22
answered Can I use AES CTR mode to encrypt files with same key and nonce?