57,395 reputation
17139235
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 9 months
seen Jul 15 at 23:36

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jun
30
revised Is the SanDisk ULLtraDIMM secure after power-down?
Making it more readable by creating paragraphs
Jun
30
comment Why FATCA IDES “protocol” does not use RSA encrytion directly on Zip archive ?
@YvesMartin No, it's not too short at all. Brute-forcing a 256-bit key with conventional computers would take more energy than is thought to exist in the universe. The reason RSA keys are longer in numerical size is that they represent primes rather than just any old random number, and the mathematics involved to crack RSA means we (currently) need keys in the order of 2048-bits or larger to remain safe.
Jun
29
answered Why FATCA IDES “protocol” does not use RSA encrytion directly on Zip archive ?
Jun
29
comment DDOS Server Attacks & Domain Names
Assuming you have control over your NS records (e.g. in your domain provider's control panel), you could just use CloudFlare's free DDoS protection.
Jun
18
comment Is it any more or less secure to delete all my cookies vs. individually logging out?
To be clear: deleting your cookies alone (or first) is a bad idea, as the session might still persist on the server. Best option is to log out, then delete any remaining cookies.
Jun
18
answered Safely sharing session accross sub-domains
Jun
15
revised How to distinguish between a scam and a genuine call?
edited tags
Jun
15
comment How to devise a security policy?
@JohnnyUtahh Thanks for the heads up. Fixed the links.
Jun
15
revised How to devise a security policy?
fixed dead links
Jun
15
comment How to devise a security policy?
@JohnnyUtahh There's certainly overlap on the Venn diagram, but they're not the same. A usage policy governs how employees should conduct themselves when using IT systems (e.g. no naughty images via work internet access). A security policy also has elements of conduct (e.g. no dodgy sites, cracked software) but is usually much larger in scope, such as giving procedures and contact information for security incidents, and may be broader in scope than just IT (e.g. handling of physical media, documents, etc.)
Jun
15
comment What is the purpose of using different DNS server in nmap?
@biziclop In that particular case I'd be using dig rather than nmap, but you are correct that it can be done that way.
Jun
15
answered What is the purpose of using different DNS server in nmap?
Jun
12
comment How is Gmail susceptible to brute-force attacks?
"so if it didn’t leak from some other site" is the key part here. It's very likely she re-used her password elsewhere and it got compromised.
Jun
11
answered How do I prevent users to pose the document by taking pictures using a camera?
Jun
10
awarded  Good Answer
Jun
10
revised Can I show Credit Card Data to final customers and be PCI Compliant?
title
Jun
10
comment How to look for steganography in a picture
strings.
Jun
10
comment How to look for steganography in a picture
Have you tried strings over the image?
Jun
10
comment Is it secure not to have csrf protection in login forms?
@Aatif It's also a form of session donation. The terminology is largely moot anyway - the point is the actual attack and its impact.
Jun
10
awarded  Enlightened