56,748 reputation
17138233
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 8 months
seen 5 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Sep
20
awarded  Vox Populi
Sep
20
comment Is HTTP compression safe?
Interesting. 1kB seems a little excessive though - wouldn't 128 to 256 bytes do the job? That forces them to do ~65k times the requests, which is more than enough to make it difficult.
Sep
20
comment Windows Vista user logon integrity
@Iszi That's correct. When you clear the log, it deletes all entries, then adds an entry stating that you deleted the logs.
Sep
20
reviewed Reviewed Is it possible for a phishing link to install a major virus on a Mac?
Sep
20
reviewed Reviewed How does Remote Access Trojan / Backdoor Software work?
Sep
20
reviewed Leave Open How can I remotely detect versions?
Sep
20
awarded  Enlightened
Sep
20
awarded  Nice Answer
Sep
20
comment Unknown Service Identification
You could also fire up Wireshark and analyse the packets yourself, during an nmap scan.
Sep
20
comment Code signing with MD5 on Windows 8
@Ramhound Note that the code signing enforcement is not to benefit you as a developer. It's for end users. Enabling insecure code signing techniques allows the spread of malware like Flame. However, in Windows 7, they will not update the requirements, because so much existing software expects MD5 to be supported. Changing those requirements makes a serious headache for end-users, because their existing signed software won't run at all.
Sep
20
comment Code signing with MD5 on Windows 8
@RasmusFaber No confusion. See Signing a Driver for Public Release‌​, Signing and Checking Code with Authenticode, Driver Signing Policy (Windows Vista and Later) and an advisory blog post, in which they explain why they revoked the cert chain.
Sep
20
comment Is HTTP compression safe?
Would adding a random number of padding bytes in the payload help? Assuming the padding bytes themselves were generated by a cryptographically secure RNG, such that they're unlikely to be compressed, I'd imagine it'd make the attack much harder to pull off reliably.
Sep
20
comment What are the career paths in the (illegal) computer security field?
On top of that, the organised crime guys are likely to (figuratively) throw the malware devs under the bus when the cops come knocking on the door, to save their own asses.
Sep
20
answered Code signing with MD5 on Windows 8
Sep
20
comment Code signing with MD5 on Windows 8
Microsoft has cut MD5 support for code signing.
Sep
20
comment Steganography to hide text within text
+1 for spammimic. It rocks :)
Sep
20
answered What are the career paths in the (illegal) computer security field?
Sep
20
comment What are the career paths in the (illegal) computer security field?
Very interesting question! I often wonder the same thing...
Sep
19
awarded  Nice Answer
Sep
19
awarded  Enlightened