53,628 reputation
17128220
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 6 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Sep
10
comment Encryption and compression of Data
Wow, never even knew about that attack. Great writeup, too!
Sep
10
answered Encryption and compression of Data
Sep
10
comment Global Blackout is a myth?
@Luc The datacenters are globally distributed, across a huge number of nation states. Bombing them would require going to war with 50%+ of the entire world. Whilst there is a technical potential for such a bombing operation, the political ramifications would be bizarre and immense. At that point, functional DNS root servers would be so far down the list of civilization's worries that I don't think it's even worth entertaining.
Sep
10
comment How to block all access to Akami deploy servers and Apple push servers?
It won't, since it'll only prevent you from resolving that specific server, rather than subdomains. For example, adding 127.0.0.1 google.com to /etc/hosts doesn't block mail.google.com.
Sep
10
comment Is MD5 considered insecure?
@CodesInChaos Yeah, that's probably a better description. It was about 7am when I wrote that!
Sep
10
comment How to block all access to Akami deploy servers and Apple push servers?
There are probably hundreds of Akamai / Apple push servers. You'd need a hosts entry for each. You're better off with a firewall that can block by wildcard, e.g. *.deploy.akamaitechnologies. With a decent firewall you should also be able to set additional rule options, such as the time ranges that they're enabled.
Sep
10
accepted How does a new SMS message overwrite a previous one?
Sep
10
answered Global Blackout is a myth?
Sep
10
comment Is MD5 considered insecure?
Do not use standard hashes for password storage. They're way too fast. PBKDF2 / bcrypt are the way to go.
Sep
10
comment Is MD5 considered insecure?
Keep in mind that partial pre-image attacks are possible with MD5. You can take an existing file and alter metadata / append junk and generate a collision against a file you generate entirely. That's how the MD5 SSL certificate collision attack works.
Sep
9
revised How to design SIEM RFP, keeping in view large database requirements?
spelling / formatting
Sep
8
awarded  Nice Answer
Sep
7
awarded  Pundit
Sep
7
awarded  Nice Question
Sep
5
comment How does a new SMS message overwrite a previous one?
@Ramhound Sure, until the logs expire. Providers only cache them for a short time after delivery is confirmed.
Sep
5
comment Building list of vulnerabilities that should be verified during pentest
OWASP is for generic descriptions of vulnerabilities, and advice on how to prevent / mitigate them. It's useful for background knowledge, but it doesn't really directly help identify vulnerabilities in systems, or document specific instances of known vulnerabilities.
Sep
5
answered Has any virus attempted to compromise the anti-virus database?
Sep
5
comment Are Java applets more secure than regular forms for login?
Clearly not.
Sep
5
answered SSL Based Denial of Services due to Message Digest
Sep
4
awarded  Nice Question