48,563 reputation
12118208
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Oct
7
reviewed Edit What would one need to do in order to hijack a satellite?
Oct
7
revised What would one need to do in order to hijack a satellite?
Added some key highlights from the link.
Oct
7
reviewed Close Logging network traffic
Oct
7
reviewed Close Reconnaissance countermeasures
Oct
7
reviewed Close /etc/shadow in old format, where is salt stored?
Oct
7
reviewed Close Is OWASP ESAPI .NET Edition really used? Is this project still alive?
Oct
7
reviewed Close cookie issue with same domain same port but different path
Oct
6
comment Can AES encryption prevent modifying bits in a wireless protocol?
To be specific, if you choose AES-CBC you'll have block-level malleability allowing you to apply any arbitrary xor tweak to a block (and thus giving you arbitrary modification if you know any plaintext) with the side-effect of corrupting the adjacent block. Or, if you can modify the IV arbitrarily, you can gain xor malleability on the first block with no side-effects. If you choose AES-CTR or any other stream mode, you'll have full xor malleability across the whole stream. So you need authenticity either through MAC or an authenticated mode (e.g. GCM).
Oct
6
awarded  Popular Question
Oct
5
awarded  Nice Question
Oct
3
awarded  Guru
Oct
2
comment Does dual boot hurt security?
Easiest references are the malleability article on Wikipedia and this great article on practical exploitation of LUKS in Ubuntu.
Oct
2
comment Does dual boot hurt security?
According to Wikipedia dm-crypt uses CBC by default, so it's vulnerable. There are two main attacks. The first is to just corrupt data blocks, which is possible for any block. The second is to xor ciphertext blocks with a tweak, and that results in the target block's plaintext also being xor'ed with that tweak, and the adjacent block being totally corrupted. This can be useful if you know that a particular bootloader or kernel image is in a specific location on the encrypted disk, because you might be able to modify code.
Oct
2
comment How can I recover files encrypted by Android ransomware?
That's only for CryptoLocker, not any arbitrary ransomware.
Oct
2
comment Does dual boot hurt security?
Caveat: Encrypting your partitions, in most implementations, DOES NOT fully prevent attackers from modifying data on the encrypted disk. Any disk crypto that runs in CBC mode will be vulnerable to block-level xor malleability.
Oct
2
comment Effect on PCI compliance of not checking SSL certificate?
It's probably also worth getting in touch with the PCI Council and mentioning this. You might be one of the first to object to this request, and others may have just gone ahead with it.
Oct
2
comment masking credit cards PAN with zeros
@Timee That makes no sense at all; it's like saying having a database of every number from 0000 to 9999 violates PCI because you're guaranteed to have someone's PIN in there.
Oct
1
answered masking credit cards PAN with zeros
Oct
1
awarded  Nice Answer
Oct
1
comment Where are the user credentials stored when remember password is selected?
If you downvoted this, please leave a comment to explain why.