45,612 reputation
12105191
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 9 months
seen Jul 26 at 21:45

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jul
25
comment Questions about common exploits
Would the downvoter like to share their criticisms, rather than just providing abstract disagreement?
Jul
25
comment Could running applets/videos trigger a drive-by download attack?
See also.
Jul
24
awarded  Notable Question
Jul
14
awarded  Notable Question
Jul
11
awarded  Enlightened
Jul
11
awarded  Nice Answer
Jul
9
comment How to store salt?
@cooky451 I'm not sure what you're asking, but I suggest creating a new question.
Jul
2
awarded  Enlightened
Jul
2
awarded  Curious
Jul
2
awarded  Inquisitive
Jul
2
awarded  Nice Answer
Jun
24
awarded  Popular Question
Jun
10
answered Certificate pinning in a browser
Jun
10
comment RSA verification time
@TomLeek While you're correct, I think this is a homework question, considering the fact that he's asking for those three specific CPUs and they all happen to have benchmark scores for 1024-bit key generation in those tables. From what I can tell, the tutor is trying to get them to do clock * ticks to get time.
Jun
10
comment RSA verification time
This looks like homework, and seems to be entirely based around calculating times from clock frequencies rather than security (just do clock * ticks = seconds)
Jun
10
comment Is cryptography possible without volatile memory?
CPU registers and cache are certainly volatile.
Jun
9
comment If md5 is only insecure because of its speed, why doesn't this workaround make it reasonably secure?
Salts and peppers do not change the computational complexity of a hash-based system significantly. They are designed to prevent against precomputation attacks such as Rainbow Tables.
Jun
6
awarded  Generalist
Jun
6
comment How to detect the so-called “undetectable” Gameover Zeus?
I like that you linked the five "publications" I'd avoid for any balanced and sane view on the matter. Especially the Daily Mail... seriously? I direct you to the Daily Mail Song.
Jun
6
comment XSS prevention by black-listing
Why not just use an actual content filtering function from your web language? Or OWASP's filter engine?