Reputation
59,185
Next tag badge:
593/400 score
74/80 answers
Badges
17 146 240
Newest
 Nice Answer
Impact
~2.4m people reached

Sep
29
awarded  Notable Question
Sep
29
awarded  Nice Question
Sep
29
awarded  Popular Question
Sep
29
answered Can a webcam be turned on when disabled in Windows' device manager?
Sep
29
reviewed Reject appsec tag wiki
Sep
28
revised From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Fixed int3 opcode byte (0xCC, not 0xC3)
Sep
28
comment SSL decryption in Wireshark
@Bruno Yeah, that's true. I was attempting to explain it in layman's terms, so I didn't include the details. Either way, the private key directly or indirectly provides confidentiality of the session key, which provides confidentiality of the underlying data stream.
Sep
28
reviewed Reject Iframe hack / done through FTP?
Sep
28
awarded  Cleanup
Sep
28
asked How does SSL/TLS work?
Sep
28
comment How do AV vendors choose malware names?
Note that the family name is usually taken, as Rory said, from strings found within the malware binary. If there's a lack of good ones, they make a name up.
Sep
28
comment SSL decryption in Wireshark
@cprogcr The private key of the certificate is used to encrypt the handshake, which contains the session key exchange. You need the private key to decrypt the handshake, which you can then use to decrypt the traffic.
Sep
28
comment How can I scan open ports without being traced back
@Rook But in that case you may leave logs on the FTP box.
Sep
26
awarded  Nice Answer
Sep
26
revised Phishing attack stuck with jsp loginAction.do page?
deleted 1 characters in body; edited title
Sep
26
comment What is the purpose of using Youtube-style alphanumeric ids as URL slugs?
@Iain My apologies, I missed the word "hacking" in reason #2. I guess it is a security question, then.
Sep
26
comment find password and iv of an encoded string knowing the decoded string
@drjimbob If the IV is derived from pass, and both parties know pass, the IV is known.
Sep
26
answered Can a Bitlocker To Go user pin be brute forced?
Sep
26
comment find password and iv of an encoded string knowing the decoded string
@drjimbob I think you misunderstood. Each block is combined with the previous ciphertext block. For the first block, there isn't a previous block to combine with, so the IV is used.
Sep
26
comment Is it safe to invoke PHP GD functions if you don't know whether file is a valid image?
Devil's advocate: How would you verify without loading it into GD in the first place?