57,545 reputation
17140236
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 9 months
seen Jul 15 at 23:36

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


2d
awarded  Enlightened
2d
awarded  Nice Answer
Jul
24
awarded  Good Question
Jul
15
comment
@Ulkoma Absolutely not. It is an integral part of my love of Metal Gear Solid!
Jul
15
comment
@DeerHunter Kilts are acceptable, of course.
Jul
15
comment
@MikeOunsworth To me, professionalism just means wearing pants.
Jul
15
wiki
Jul
15
awarded  Caucus
Jul
15
comment ASP.NET Machinekey encryption
@Levi Ah, well I shall defer to your knowledge on the matter. Weird though - I'm sure I got that description of behaviour from RE'ing the assemblies.
Jul
13
comment Can't get rid of “Your connection to website is encrypted with obsolete cryptography”
@StackzOfZtuff Sorry, I conflated the two.
Jul
13
comment Can't get rid of “Your connection to website is encrypted with obsolete cryptography”
"do not forget to define your own DH parameters or all DHE- ciphers are weak" - No, the ciphers are not weak. The use of shared ECDH groups is potentially problematic, and steps should be taken to generate your own parameters, but that doesn't make the cipher weak.
Jul
13
comment ASP.NET Machinekey encryption
@Levi This may depend on which version of the .NET framework you load, and whether you're looking at the desktop or web platform. The info above was derived from reverse engineering the framework assemblies, so I guess we're looking at different versions.
Jul
10
awarded  Nice Answer
Jul
1
comment Handling CSRF tokens on pages longer than the PHP session limit
Right. You can just change session.gc_maxlifetime to a larger timeout. The problem described there is that you shouldn't rely upon the PHP GC to time out your session on the server side, because it may not do so immediately after the configured time. It should never time it out before that time.
Jul
1
comment Handling CSRF tokens on pages longer than the PHP session limit
"PHP session limit"? What session limit? The session cookie expiry can be set at any value, including forever. Besides, if the session no longer exists, they should be logged out, which is a totally different issue.
Jul
1
revised Tor website HPKP (key pinning) failure
Title / grammar / various edits
Jul
1
comment What is the difference between a hash table and a rainbow table, and how are they both used?
Simple answer: rainbow tables chain similar hashes together to save space, by not storing the prefix for every hash. (e.g. f2ca5152b0..., f2ca513a13..., and f2ca5177b8... can be stored as f2ca51 -> 52b0..., 3a13..., 77b8... since they share the same prefix).
Jun
30
awarded  Popular Question
Jun
30
reviewed Edit Is the SanDisk ULLtraDIMM secure after power-down?
Jun
30
revised Is the SanDisk ULLtraDIMM secure after power-down?
Making it more readable by creating paragraphs