57,470 reputation
17139235
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 9 months
seen Jul 15 at 23:36

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Sep
20
revised From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Typo bracket
Sep
20
comment What are the career paths in the (illegal) computer security field?
@Diarmaid Wow, people actually fell for that PCeU scam?
Sep
20
comment Proper hash_hmac key creation
@Erik You don't use characters at all. Characters are letters and symbols, which are stored in an encoding format. One character might be stored in one byte, two bytes, or an arbitrary number of bytes. If you're randomly generating a key, look into some of the other questions here about generating cryptographic keys in PHP.
Sep
20
revised Proper hash_hmac key creation
added 579 characters in body
Sep
20
answered Proper hash_hmac key creation
Sep
20
comment Virus Encoded in Video
@JoelCornett Theoretically, yes, but in almost 20 years of programming experience I've never found a program without a single bug, let alone one as data-intensive and complex as a video codec.
Sep
20
reviewed Looks OK How secure is this login page?
Sep
20
revised Using Window Servers 2003 after security updates are discontinued
deleted 51 characters in body
Sep
20
comment Is HTTP compression safe?
Good point, no idea why I didn't think of a patient attacker. I've got my "user-friendly" hat on today, rather than my "evil bastard" hat - it must be warping my judgement!
Sep
20
answered can an attacker find WPA2 passphrase given WPA key data and WPA MIC
Sep
20
awarded  Vox Populi
Sep
20
comment Is HTTP compression safe?
Interesting. 1kB seems a little excessive though - wouldn't 128 to 256 bytes do the job? That forces them to do ~65k times the requests, which is more than enough to make it difficult.
Sep
20
comment Windows Vista user logon integrity
@Iszi That's correct. When you clear the log, it deletes all entries, then adds an entry stating that you deleted the logs.
Sep
20
reviewed Reviewed Is it possible for a phishing link to install a major virus on a Mac?
Sep
20
reviewed Reviewed How does Remote Access Trojan / Backdoor Software work?
Sep
20
reviewed Leave Open How can I remotely detect versions?
Sep
20
awarded  Enlightened
Sep
20
awarded  Nice Answer
Sep
20
comment Unknown Service Identification
You could also fire up Wireshark and analyse the packets yourself, during an nmap scan.
Sep
20
comment Code signing with MD5 on Windows 8
@Ramhound Note that the code signing enforcement is not to benefit you as a developer. It's for end users. Enabling insecure code signing techniques allows the spread of malware like Flame. However, in Windows 7, they will not update the requirements, because so much existing software expects MD5 to be supported. Changing those requirements makes a serious headache for end-users, because their existing signed software won't run at all.