47,243 reputation
12110200
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 11 months
seen 4 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


3m
awarded  Nice Answer
1h
awarded  Nice Answer
4h
answered Server situated on two physical networks - Bad idea or not
4h
answered Four-factor authentication
4h
comment Four-factor authentication
The time is not an authentication factor. It's still a security control, but it has nothing to do with authentication itself, as it doesn't provide evidence that something or someone is authentic.
4h
answered Password verification scheme (used in eg. MS Office) - more secure than just a hash?
4h
answered Why does malware periodically check google.com
6h
answered Is it a security threat to have food or drink next to computers
6h
comment What are lawful network interception tools?
@GriffinNowak Possession of malware by itself, for the mostpart, in jurisdictions I am aware of, is entirely legal. Consider a case where someone is infected by malware; the computer is their property and therefore they are in possession of malware. If simple possession was illegal, then they would be, which makes no sense. The interesting (and muddy) parts of law are the parts that separate incidental possession from possession with intent.
7h
comment Difference between secured crypto-processor and cryptoprocessor
@Souvik Your clarification seems to include your answer right there. The latter uses encrypted buses. Though I don't think "secure cryptoprocessor" is a particularly standard term anyway.
9h
answered What are lawful network interception tools?
10h
comment Intermediate certificate not sent to clients?
This question would probably be more appropriate over at ServerFault. I've flagged for a moderator to take a look.
11h
answered What is the difference between XSS and Cross Site Flashing?
11h
answered Understanding Diffie-Hellman key exchange
12h
answered I have a unlimited vpn and a 2GB isp. can i use my vpn without using the 2 gig limit on my ISP?
1d
awarded  Enlightened
1d
awarded  Nice Answer
1d
revised How do I hash a password in C#?
Title, tags, cruft.
1d
comment How do I hash a password in C#?
I agree with the advice in Angel's link. Salted PBKDF2 as implemented in the Rfc2898DeriveBytes class is pretty much industry standard.
1d
comment ATA security erase on SSD
@cprcrack Those that adhere to the specification (which should be all high-street brand drives) are encrypted internally, yes.