56,870 reputation
17138233
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 9 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


May
22
comment Can I use AES CTR mode to encrypt files with same key and nonce?
I'm not sure how you're inferring that from the question.
May
22
comment Can I use AES CTR mode to encrypt files with same key and nonce?
If his attack model is that an attacker can't get access to the encrypted data, why encrypt the data in the first place?
May
22
answered Can I use AES CTR mode to encrypt files with same key and nonce?
May
22
asked Does TLS_FALLBACK_SCSV provide blanket protection against downgrade attacks?
May
22
comment What is Logjam and how do I prevent it?
@Atsby You could say the same about drone attacks.
May
20
awarded  Nice Answer
May
20
comment Offline RSA strong prime test similar to Phuctor?
You should note that the factored 4096-bit key was a corrupt subkey, not a real generated key. As such it had no real-world impact.
May
20
comment Should diffie-hellman parameters be unique to a vhost
Yes, it matters, though 2048-bit makes the point rather moot.
May
20
comment What is Logjam and how do I prevent it?
@ThomasPornin I figured there was some crypto wizardry behind the precomputation that I wasn't aware of. Your answer is excellent, by the way. I understand it better than I did before.
May
20
comment PayPal encrypted with obsolete cryptography
@cburatto The selected cipher suite is agreed upon by both the client and server, depending upon support and suite priorities.
May
20
answered What is Logjam and how do I prevent it?
May
19
answered Cryptowall encryption files
May
19
comment How to escape a cookie to cause split response?
You can only exploit it as a splitting attack if you can cause encoded values to be decoded into the cookie value, e.g. passing %0D%0A into the URL producing a raw CR+LF in the cookie.
May
19
comment Virus attached or included in VST(i) Plugin
Why are people flagging this as "Primarily opinion based"? It's a good, objective question, asking whether VSTs are somehow prevented from acting maliciously, and whether there's a risk. Please read things fully and properly before you issue a flag.
May
19
answered Virus attached or included in VST(i) Plugin
May
19
awarded  Enlightened
May
19
awarded  Nice Answer
May
19
awarded  Enlightened
May
19
awarded  Nice Answer
May
19
revised How can the Android GraphicBuffer::unflatten() vulnerability (CVE-2015-1474) be exploited remotely?
additional clarifications