Reputation
Next tag badge:
1520/400 score
75/80 answers
Badges
17 155 253
Impact
~2.8m people reached

Oct
13
awarded  Enlightened
Oct
13
awarded  Nice Answer
Oct
12
awarded  Yearling
Oct
8
awarded  Enlightened
Oct
8
awarded  Nice Answer
Sep
30
awarded  Notable Question
Sep
25
awarded  Popular Question
Sep
13
comment Ignoring collision and (second) pre-image resistance, what makes a cryptographic hash function strong?
@tsorn Yes, essentially, which is something that cryptographic hash functions do not provide.
Sep
13
comment Ignoring collision and (second) pre-image resistance, what makes a cryptographic hash function strong?
@tsorn There are lots of people using bad security practices out there. It's the whole reason I have a job in the first place.
Sep
13
answered Ignoring collision and (second) pre-image resistance, what makes a cryptographic hash function strong?
Sep
13
comment What are the privacy and security implications of Windows Telemetry
@Iszi The instrumentation telemetry contains nothing that I'd consider privacy-impacting. It's essentially just a list of error event IDs that have occurred for Windows components. Both Windows and OS X have been doing that for time immemorial, and several Linux distros (incl. Ubuntu) have similar features.
Sep
5
awarded  Nice Answer
Sep
4
comment Question about ISO 27001:2013 scope definition
I would almost certainly say that the second company is "in scope", in that you need to certify that their physical security controls and policies (or lack of them) don't impact you.
Sep
2
comment What is HiASLR?
@Voo Come to think of it, I don't understand that one either. I've emailed Matt Miller to see if I can get some clarification.
Sep
2
comment What is HiASLR?
@Voo I believe what "Non-ASLR DLL images (opt-in)" refers to is DLLs without the NX compatible flag in their header (i.e. no compile-time support) but with the opt-in mitigations enabled for the process, via one of the options listed in slide 39.
Sep
2
answered EMET disable DEP on IE for specific site
Sep
2
comment What are the privacy and security implications of Windows Telemetry
@Begueradj Read the article I linked. The Enterprise version offers the "turn off" option in the GUI, but the registry fix works regardless of your OS edition.
Sep
2
comment NX + ASLR bypass - troubles with return address of .bss
Good point; strcpy won't copy a null, hence your problem in the first place. You could use a memcpy gadget instead, or look for a gadget that'll do something like pop eax; mov [eax+??], 0; ret (where eax could be any general purpose register, and the offset is any sensible value, or just zero). This would let you do an arbitrary memory write of null bytes.
Sep
1
comment NX + ASLR bypass - troubles with return address of .bss
Try adding a 3rd strcpy gadget using a rop gadget that points to a null byte, so that bss+3 is set to \0, thus terminating the string before any junk.
Sep
1
comment FIPS 140-2 Compliance vs Validation & Products vs. Modules vs. Ciphers
I believe that a cryptographic module is defined as an implementation, whereas cryptographic algorithms and ciphers are (as the name indicates) just algorithms and ciphers like Diffie-Hellman, AES, RSA, etc. From what I can tell, NIST requires organisations subject to FIPS 140-2 to use FIPS 140-2 compliant cryptographic modules, which in turn can only utilise FIPS 140-2 complaint algorithms and ciphers. I can't find any guidance on whether explicit validation has to be performed on modules for correct compliance, though.