43,472 reputation
1294172
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 6 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Aug
10
comment Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
Sounds good to me.
Aug
10
comment Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
If the app doesn't require network resources, disconnect the machine that is running IE from the network completely.
Aug
10
comment Is it okay to wrap a cryptographic hash with MD5 for storage?
Could the downvoter please explain?
Aug
10
answered Application of Bayesian network for Web Application Security
Aug
10
comment Why does the password field not show the entered text?
Cannot count the number of times I've shoulder-surfed people's details. Never used them of course, but be aware of your damn surroundings people!
Aug
10
answered Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
Aug
10
comment Is it possible to break captcha?
@drjimbob By this point I'm relatively sure that Andrew is just a neural net with a string generator attached. SELECT * FROM words WHERE meaning ~= subject ORDER BY RAND()
Aug
10
comment Is it more or less secure when an entity shares it's security procedures?
@RoryAlsop That's the idea, anyway ;)
Aug
10
comment Appilicability of Theoritical Computer Science/Formal methods in Malware research
@this.josh I've never heard that point stated so well. Mind if I steal that quote? ^_^
Aug
10
revised How to do layer 3 VLAN hopping?
formatting
Aug
9
awarded  Nice Answer
Aug
9
awarded  Nice Question
Aug
9
comment Information Security is becoming more important, but why is it still so difficult to start off in?
+1 for the completely correct observations about ridiculous government spending, but -1 for not really giving any options for OP to look into.
Aug
9
comment Is it okay to wrap a cryptographic hash with MD5 for storage?
The first option is stronger, since you're not relying on an intermediate hash. Also, SHA256 would be 32 bytes final output, not 64 bytes.
Aug
9
comment Is it okay to wrap a cryptographic hash with MD5 for storage?
PBKDF2 and similar KDFs don't require you to do this at all. You can just explicitly set the derived key length.
Aug
9
revised Is storing answers to security questions in plain text bad form?
added 7 characters in body
Aug
9
comment Is it okay to wrap a cryptographic hash with MD5 for storage?
Your second point doesn't have much merit. Making rainbow tables for the entire output space of a KDF is completely infeasible.
Aug
9
answered Is storing answers to security questions in plain text bad form?
Aug
9
answered Is it okay to wrap a cryptographic hash with MD5 for storage?
Aug
9
comment Has cryptography reached the development level where social engineering is the only reliable method of attack?
@LordScree Even less if the occupant will let you if you ask nicely.