45,582 reputation
12105191
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 9 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jun
2
awarded  Nice Question
May
30
comment Who can carry out Man-in-the-Middle (MITM) attacks?
MitM is usually limited to people on the same local network as you, but that might be anyone if you're using open wifi (guy with a laptop at Starbucks), or are in a work environment (malicious insider). But anyone can do a MitM across the internet if they happen to luck out on poorly configured DNS servers or bad passwords on the registrar account. Also, the WiFi hijacking one is trivial - you can buy off-the-shelf devices that do it.
May
28
awarded  Good Question
May
27
comment Does using the same encryption algorithm multiple times make a difference?
ROT256-ECB is vastly superior. It's what I encrypt all of my answers with.
May
27
answered Who can carry out Man-in-the-Middle (MITM) attacks?
May
27
awarded  Nice Answer
May
27
comment libraries alternative to gcc stack-protector / fortity source feature on linux
Surely those features aren't reliant on linking a library? I was under the impression that they're features of the compiler rather than features of libc.
May
27
comment Ethical question regarding accessible sensitive data at school
@Anonymous I'd say deliver it to the administrative head for the school (e.g. headteacher / principal). They'll forward it on to tech once they've decided how to handle it. Sending it direct to tech feels like you're going "around" the system a bit.
May
26
comment Does using the same encryption algorithm multiple times make a difference?
@drjimbob You are correct; I made the assumption that AES-CBC was being performed three times, and therefore the padding could be verified.
May
26
comment libraries alternative to gcc stack-protector / fortity source feature on linux
What requirements do you have that aren't satisfied by the built-in functionality?
May
26
answered Does using the same encryption algorithm multiple times make a difference?
May
26
answered Ethical question regarding accessible sensitive data at school
May
26
awarded  Nice Answer
May
26
awarded  Nice Answer
May
24
comment How can the Google web crawler bypass portals?
Many sites have checks to see if the user-agent belongs to the Google crawler, and bypass certain access checks. It's always a good thing to check for if you're testing a site.
May
24
comment CSRF protection with custom headers (and without validating token)
@ChrisH. Future technologies and changes to his site might allow an attacker to add the header. If I remember correctly, HTML5's web sockets now allow this. Changes to his site might also introduce a HTTP response splitting bug, which may also bypass header checks. Regarding the XSS comment, I'm referencing the fact that if you have an XSS on page A, having a dynamic token creates a requirement for the attacker to read page B, which might block the request based on X-Requested-With, or be filtered via CSP.
May
24
comment Where does SSL encryption take place?
@begueradj As we've already discussed, TLS doesn't really fit anywhere in the OSI model. Strictly speaking, it's layer 7, not 5 or 6, but in terms of where you'd place it in terms of network protocol encapsulation it sits between TCP and the application, so 5 and 6 make sense. The distinction between 5 and 6 is also a grey area, because TLS does a lot more than just encrypt the data. So, as I've said before, this is an oversimplification and is only meant to express its position in the network stack in a practical sense.
May
23
awarded  Notable Question
May
20
awarded  Popular Question
May
15
awarded  Nice Question