46,998 reputation
12109197
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 11 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


1d
comment ATA security erase on SSD
@cprcrack Usually the term "encrypted SSD" is reserved for SSDs that offer user-selectable keys. The specification for flash devices contains a section for protected area keys, vendor keys, data keys, and user keys. Whether these are externally accessible is implementation specific. In devices marketed as "encrypted", the user-specified key is (usually) used to encrypt the data key which is present in a normal SSD, so that destruction of data is assured during a secure erase operation even if an attacker gains knowledge of the user's password.
2d
comment ATA security erase on SSD
@cprcrack A few: TechRepublic article‌​, Intel SSD booklet, Sophos article, PC World article, and a Kingston article which implies it heavily without saying it.
Sep
8
answered Is the HMAC weakened if a part of the message is part the key?
Sep
8
comment Why is GSM still used?
@user10008 You mean CDMA vs. GSM? Again, money. US carriers decided to go two different ways and now they have a ridiculous split system where different phones don't work on different carriers.
Sep
8
comment Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
If you have an old tape (audio or VHS) recorder, you can take it apart and use the write heads to wipe cards. It's a nice little project you can do in a few minutes :)
Sep
8
comment Link Layer authenticated encryption vs authentication
I'm confused by your answer. The OP asked whether auth + encrypt is better than auth alone, not whether auth + encrypt is better than encrypt alone. You seem to be focusing on the authentication part, which is a given anyway as both options are authenticated.
Sep
7
answered Are stack buffer overflows even possible in this instance?
Sep
7
answered Link Layer authenticated encryption vs authentication
Sep
6
revised How to know if unauthorized users have connected to my home wifi?
The IP should be e.g, not i.e.
Sep
6
comment What hash version is implemented on ThePirateBay.se? SHA-1 or MDA-5?
Note that the BitTorrent protocol, by requirement, hashes all the incoming pieces and checks them against those stored in the .torrent file, so the integrity is guaranteed anyway.
Sep
5
comment What's this type of leak detection method called?
Ha, you beat me to it!
Sep
5
answered What's this type of leak detection method called?
Sep
5
comment Where can I “hide” easter eggs for students learning about Linux security?
@Rook The idea wasn't to exploit it, but rather to hide a file somewhere for a challenge.
Sep
5
awarded  Enlightened
Sep
5
awarded  Nice Answer
Sep
4
comment Where can I “hide” easter eggs for students learning about Linux security?
Another evil trick: unmount /tmp, write a file to the underlying file system (i.e. the /tmp directory in the root filesystem) and then re-mount /tmp. Can only be found by enumerating inodes or guessing the trick and unmounting it.
Sep
4
answered BitLocker Password Change
Sep
4
answered Is information security based entirely on mathematics
Sep
4
answered System Account in Windows
Sep
4
answered Safe/Secured room?