55,355 reputation
17132226
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 7 months
seen May 22 at 19:58

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Sep
14
answered Information disclosure by identifiers
Sep
14
comment Extremely suspicious phone call — what to do?
Yep, sounds like the fake AV call scam.
Sep
14
comment Global Blackout is a myth?
You're making highly generalised statements about a ridiculously complex political and technical scenario, with no technical or statistical analysis, and zero empirical evidence. We're downvoting your answer because it's not an answer, it's pure conjecture.
Sep
14
comment Can't explain data from side channel attack attempt
It's neither O(1) or O(n), since the time "glitches" occur on alignment and memory boundaries (L1 cache, L2 cache, etc). It's predictable, but it doesn't fit into a big-O model.
Sep
14
comment Identifying an unknown hash
It's not ASCII hex to base64, it's raw bytes to base64. The full character set is in effect.
Sep
14
comment Global Blackout is a myth?
This site isn't for political statements or conjecture. It's a Q&A site where we expect objective and well-sourced answers.
Sep
13
awarded  Nice Answer
Sep
13
comment Can't explain data from side channel attack attempt
@MichaelMior The problem with your loop is that the if isn't one if, it's 3. Depending on the order it gets compiled to, and how it handles the eq variable, you might find out all sorts of juicy information from the timings.
Sep
13
comment Identifying an unknown hash
It's base64 of the binary representation of the hash, hence garbage. I just converted base64 to hex and guessed MD5 based on the fact that it's 128-bit.
Sep
13
comment Global Blackout is a myth?
-1. There's no technical analysis here. The first two sentences are inaccurate, and the rest is just FUD. The bombing scenario is highly unlikely, due to the distribution of servers across dozens of countries.
Sep
13
revised Can't explain data from side channel attack attempt
expanded answer
Sep
13
answered Can't explain data from side channel attack attempt
Sep
13
answered Identifying an unknown hash
Sep
12
comment tools automating logins/hashes grabbing
There's a ton of spyware that does this. They usually go after product keys in the registry. I analysed one a couple years ago that had key extraction routines for a few hundred popular applications and games.
Sep
11
awarded  Enlightened
Sep
11
comment SSL Based Denial of Services due to Message Digest
Not really. The FIN/RST injection would do the same job.
Sep
11
awarded  Nice Answer
Sep
11
revised Estimating the size of a rainbow table
formatting
Sep
11
comment How to check if someone is in my computer
@Gilles The question is almost exactly the same, but just for Windows instead. The same principle applies.
Sep
11
answered If PCI DSS isn't a law, how can I be prosecuted for not being compliant?