Reputation
59,195
Next tag badge:
593/400 score
74/80 answers
Badges
17 146 240
Newest
 Nice Answer
Impact
~2.4m people reached

Sep
25
comment Should ettercap make the targets this slow?
@sourcejedi Keep in mind that the MitM isn't just a passthrough - it has to do packet inspection against a set of rules and perform modifications. Sure, it's a bit slower than it should be, but it's a pretty old CPU. Assuming it's running OS X alongside the MitM... ouch.
Sep
25
answered find password and iv of an encoded string knowing the decoded string
Sep
25
answered How to block the websites on client machines
Sep
25
comment Windows Vista user logon integrity
@vignesh4303 Note that the link you provided shows how to delete all logs, not just one. It's still valid, but it's an important difference.
Sep
25
answered Should ettercap make the targets this slow?
Sep
25
awarded  encryption
Sep
24
comment AES CBC over TCP - when is new IV needed
@ThomasPornin How did I know you'd show up? ;) -- thanks for the info, wasn't aware of that requirement!
Sep
24
answered AES CBC over TCP - when is new IV needed
Sep
24
answered Windows Vista user logon integrity
Sep
24
comment Windows Vista user logon integrity
@Ramhound So it does! Just seemed to imply a partial delete, for some reason.
Sep
24
comment Can fully homomorphic encryption be practical?
possible duplicate of In what ways does Full or Partial Homomorphic Encryption benefit the cloud?
Sep
24
comment Computational Feasibility of finding 'Good Links' of the following format
Yeah, by "block" I meant they'd prevent you from actually using the service, rather than something as drastic as iptables -A INPUT -s <ip> -j DROP
Sep
24
comment Plausible deniability with TrueCrypt
@Radu It doesn't take any extra steps. When you mount it as a writeable drive, the OS sets a bunch of metadata and start prefetching the files, writing last accessed dates, etc. It's highly likely that such changes would trash the drive.
Sep
24
comment Computational Feasibility of finding 'Good Links' of the following format
Oh, and +1 for the Dilbert randomness.
Sep
24
comment Computational Feasibility of finding 'Good Links' of the following format
After 10^4 or 10^5 tries, they're likely to block you from the servers anyway.
Sep
24
comment Plausible deniability with TrueCrypt
Overwriting is actually the goal. If you start up the outer TC volume without enabling inner volume protection (by entering the inner volume's password) it'll damage the inner volume. This is a scenario used for situations where an attacker forces a password from you. You give them the outer volume password, they mount it, and it kills your inner data before they can read it. Of course, they can mount it read-only, but that's no fun!
Sep
24
comment What are the disadvantages of single sign-on authentication?
Essentially the problem boils down to the fact that you're handing your security mechanisms to an opaque 3rd party. This is, simultaneously, single sign-on's biggest advantage and disadvantage. You sacrifice certainty about security for a range of other security benefits, and a few other benefits (ease of use, implementation overhead reduction, etc.)
Sep
24
revised What are the disadvantages of single sign-on authentication?
formatting, grammar
Sep
23
comment How will security need to be changed if we can crack password hashes in quasi-polynomial time?
<tinfoil> But the NSA might already be doing this! </tinfoil>
Sep
23
comment Stack Overflows - Defeating Canaries, ASLR, DEP, NX
Yes. The NX bit just provides hardware enforcement of the executable memory page protection flag. With NX disabled, it's trivial to execute pages that don't have the executable bit set, because the processor won't recognise the difference. With NX enabled, you cannot execute non-executable pages. However, VirtualProtect alters the protection flags on the page, so it actually is marked as executable, which the CPU will then allow.