48,638 reputation
13118208
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years
seen 19 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Sep
25
revised C++ memset() memory overflow
added 319 characters in body
Sep
25
comment C++ memset() memory overflow
@Mark Ah, yes, so it does - it's a local scope instance. Blame my lack of coffee this morning! Rather odd that this is flagged, then.
Sep
25
comment C++ memset() memory overflow
Come now, who voted this as off-topic? It's about the security of a particular operation in code. If that's not security, I don't know what is. Get some itch cream for your trigger finger.
Sep
25
comment C++ memset() memory overflow
@Mark Admittedly I've not used C++ for a while (I'm more used to C), but my understanding was that MyObject op; alone didn't call the default constructor, whereas MyObject op(); does. Also, surely &op doesn't refer to the object itself (since op is a pointer type) but rather the address of the pointer?
Sep
25
comment How do attackers find the database technology used by a web application?
This is a mess. Can you go through and clean this up to use reasonable formatting please? The spaces in URLs aren't needed. Also, all of part 1 is nonsense and irrelevant to the question.
Sep
25
answered C++ memset() memory overflow
Sep
24
awarded  Guru
Sep
24
answered What will disabling third party cookies block?
Sep
24
answered How could SSL certificate affect the symmetric key length?
Sep
24
comment New payment option on Paypal “Enter your online banking ID + password”: Any mechanism that could make this safe?
That's the most creative form of image censoring I've ever seen.
Sep
24
comment Escape from <script> to cause a XSS (XSS when reflection is already under <script>)
@user38257 That's not how StackExchange works. If you didn't get an answer to your question, it's probably because you didn't provide enough information or detail. Editing your question or commenting on it brings it back to the active questions list, where people are more likely to see it. Do not repost old questions.
Sep
24
awarded  Good Answer
Sep
24
awarded  malware
Sep
24
awarded  Good Answer
Sep
23
answered Secure shuffles and the rand() function
Sep
23
comment Server situated on two physical networks - Bad idea or not
@makerofthings7 It depends. I think VM separation in ESX is reasonable enough that I'd be reasonably happy putting two different sensitivity level systems on the same box. I don't know about putting them on the same VLAN though - it seems like a bad idea. If it were something that'd be storing regulated data (e.g. PCI DSS) or protectively marked data, I'd want it on a completely separate dedicated box, with appropriate dedicated controls in place.
Sep
23
awarded  Nice Answer
Sep
23
awarded  Nice Answer
Sep
23
answered Server situated on two physical networks - Bad idea or not
Sep
23
answered Four-factor authentication