55,270 reputation
17132226
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 7 months
seen 14 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


May
19
awarded  Nice Answer
May
19
revised How can the Android GraphicBuffer::unflatten() vulnerability (CVE-2015-1474) be exploited remotely?
additional clarifications
May
19
comment How can the Android GraphicBuffer::unflatten() vulnerability (CVE-2015-1474) be exploited remotely?
@SureCoat I added some clarifications which should help.
May
19
revised How can the Android GraphicBuffer::unflatten() vulnerability (CVE-2015-1474) be exploited remotely?
additional clarifications
May
18
comment How does an attacker know when he has the password?
@SnakesandCoffee It's Python in the sense that I wrote it to look a bit like Python, because it's easy to understand. Stuff like "for each" and "file.readlines" is totally bogus though.
May
18
answered How can the Android GraphicBuffer::unflatten() vulnerability (CVE-2015-1474) be exploited remotely?
May
18
comment How does an attacker know when he has the password?
@mucaho Added additional pseudocode as requested.
May
18
revised How does an attacker know when he has the password?
added new code for how it works with salts
May
18
answered How to manage a custom session in a webapp?
May
18
comment How does an attacker know when he has the password?
@NeilSmithline Yes, that is true, but for simplicity's sake and to answer the specific question of how the attacker would know the right password for the hash, I didn't go into that.
May
18
comment ASP.NET Machinekey encryption
@Jake Yes. The IV is embedded within the output data.
May
18
comment How to get started in Cybersecurity with a business management background?
Sorry - these kinds of questions are considered off-topic / opinion based, and are not appropriate for StackExchange. See the help center for more details. If you want to discuss this kind of thing, try The DMZ.
May
18
revised Signing (HMAC) cookie identifier
deleted 11 characters in body
May
18
revised ASP.NET MVC XSS Validation
formatting
May
18
comment Disadvantages of disabling RC4 in SSL/TLS
@R15 Good point, though just mentioning RC4 alone may not be sufficient due to future developments. I've just put a generic note in there.
May
18
revised Disadvantages of disabling RC4 in SSL/TLS
warranty
May
18
comment Disadvantages of disabling RC4 in SSL/TLS
@StackzOfZtuff Yes. ECDSA is the Elliptic Curve variant of DSA. Keep in mind that this is not the same as ephemeral. Unfortunately different implementations make it confusing, but the generally accepted format is to use the -E suffix (e.g. DHE) to signify ephemerality, and the EC- prefix (e.g. ECDH) to specify that it's an Elliptic Curve variant. If it's both elliptic curve and ephemeral, you'd use both: ECDHE.
May
18
comment Disadvantages of disabling RC4 in SSL/TLS
@StackzOfZtuff Sure. DSA long-term keys can be stored in certificates and used for the key exchange, just like RSA.
May
18
comment What is encryption by RSA with AES?
@AlpA No. We have The DMZ for general chat, but there are no private messages. It would defeat the point of having public discussion which can be referred to later by others.
May
18
answered How does an attacker know when he has the password?