48,523 reputation
12118208
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years
seen 2 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Aug
21
revised Are there any tools that focus on shellcode analysis?
added 94 characters in body
Aug
21
comment Secure way to transfer public/secret key to second computer
If the files are encrypted using a surrogate key protected by your private key, they'll be able to read them.
Aug
21
asked Are there any tools that focus on shellcode analysis?
Aug
21
comment How to store chat conversations on my website?
@resistor I missed that caveat. Yes, that would be the case. It'd need to be made clear to the user that forgetting / resetting their password will destroy all conversations.
Aug
20
comment Can a SIM card be tracked without cell phone and battery?
You can further enhance the estimate of the distance to a tower using the strength of the signal. Unfortunately, it's a weak estimator at best, because you don't know what the terrain is like, what weather conditions might be affecting the signal, what the battery charge level is, whether the phone is indoors, whether the phone is underground, etc.
Aug
20
comment Can a SIM card be tracked without cell phone and battery?
It doesn't really work like normal signal triangulation. If you've got agents in the field, they can use special equipment to triangulate a phone's signal, but it's not the usual method. If a SIM card is connected to Tower A, you know it's within the range of Tower A's service area. If the announcement was heard by Tower B too, you've got a nice small intersection. If it's within the range of towers A, B and C, that's an even smaller intersection. If it transitions from A to B, you know the direction. The rate of transition will tell you the speed. You just have to guess using what you've got.
Aug
20
answered Can a SIM card be tracked without cell phone and battery?
Aug
20
answered Is server hardening with GRSecurity really necessary on the CentOS 6.3 environment?
Aug
20
comment What attacks does a W^X policy prevent against?
I've come across W!->X in a grsec hardened kernel build. They create a list of pages that have been marked as writeable, then prevent kernel-level memory protection modification functions from changing the flags to include executable. When an allocation is released, the page is removed from the list.
Aug
20
revised PCI-DSS for VX570 and POS on same network
Title / quesiton
Aug
20
asked What attacks does a W^X policy prevent against?
Aug
20
comment Hardware enforced DEP on different CPUs
@Gilles Actually, NX is the generic name for the technology. Each microprocessor manufacturer has a different name for it: Intel calls it XD (eXecute Disable), AMD calls it EVP (Enhanced Virus Protection), ARM has XN (eXecute Never).
Aug
20
comment Why do some large companies still store passwords in plain text/decrypt-able format?
@ThomasClayson Sadly the answer isn't that. It's "we don't know why they do it." There's a whole host of possible reasons: conflicting business priorities, financial issues, management resistant to change, new projects, incompetent dev team, plain old ignorance, etc. We can provide you with conjecture galore, but StackExchange is the place for facts, not guesses.
Aug
20
comment Why do some large companies still store passwords in plain text/decrypt-able format?
Agreed. It reads like a rant, rather than a question. I totally agree with you (I've been heavily involved with the problems with Tesco) but it's just not a good fit for StackExchange.
Aug
20
comment Any reasons to why not use randomize_va_space?
Excellent answer. It's important to note that it's on by default in most modern ASLR-enabled distros.
Aug
20
revised Any reasons to why not use randomize_va_space?
Formatting
Aug
20
revised How to store chat conversations on my website?
added 11 characters in body
Aug
20
answered How to store chat conversations on my website?
Aug
20
reviewed Approve suggested edit on How to store salt?
Aug
20
comment How to safely view a malicious PDF?
Windows has strings too.