55,295 reputation
17132226
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 7 months
seen May 22 at 19:58

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


May
15
answered SQL Injection explain this query
May
15
comment Need help with malware
I don't think you have malware. Connections from localhost to localhost are totally normal - it's a comment method of interprocess communications (IPC).
May
15
comment Is there a full disk encyption software that shows different content depending on what password has beeen used?
@Damon I would also point out that BitLocker has been reviewed by plenty of people in the security community. Just because there's no code available doesn't mean people aren't disassembling and looking at things. The full NT6.1 code is also available under shared license, which a fair number of organisations have access to.
May
15
comment Is there a full disk encyption software that shows different content depending on what password has beeen used?
@Damon "unknown, undocumented implementation" - BitLocker's crypto design is fully documented. Here's a starting point. Here's some more. You also don't need to use the TPM - mine's deactivated and I run BitLocker in passphrase mode - it's entirely optional to use the TPM. The "startup pin" is also not limited to 68-bit strength - I can't find any reference to this anywhere and would like to know where you found it.
May
15
comment Completely encrypting virtual machine (for free)
Why not just encrypt the host with BitLocker? Or DiskCryptor? Or FreeOTFE?
May
15
answered encryption vs access control comparison
May
9
comment Bitlocker without TPM with both a startup USB and password?
The USB + PIN mode without a TPM was removed after Vista, iirc, because it was considered to not actually offer any additional security due to the implementation.
May
9
comment PKCS7 vs TLS 1.2 padding
@dave_thompson_085 Yes, this is true. However, check section E.2 at the bottom for information about how SSLv3 acts in SSLv2 compatibility mode - it notes that random padding must be used in that case. This indicates that SSLv3 is expected to potentially do something else for its padding in non-legacy mode - I think the idea was to leave it implementation specific or give rise to tying the padding to cipher suite specifications instead. Either way you're correct, hence why I said it's no detriment in TLS 1.2. It was not a good idea in 1.x or 3.0.
May
9
awarded  web-browser
May
8
comment configuring burp to use in proxy environment
@ManojVarma No probs. Don't forget to mark as accepted.
May
8
comment How to make sure that the cryptographic hardware accelerator is being used in am335x?
You're probably better off asking the manufacturer. TI's support is pretty good.
May
8
comment PKCS7 vs TLS 1.2 padding
No. In the case of a message such that len(msg | MAC) % block_size == 0 an entire block of padding is added.
May
8
answered configuring burp to use in proxy environment
May
8
answered PKCS7 vs TLS 1.2 padding
May
8
comment 3rd Party Authentication protocol
@Nimyz 8-bit microcontrollers aren't as flimsy and weak as you might expect. The only thing that stops me running TLS on my Atmega 328P is the fact that it doesn't have enough memory to handle RSA computations on 1024-bit or larger keys. I could probably use an attached SPI/I2C RAM IC for additional memory, but then that'd be much slower, and by that point it's probably just better to use a cheap ARM device with external SRAM instead. Anyway, my advice would be to use HMAC for message signing with a shared secret.
Apr
28
awarded  Popular Question
Apr
27
answered Are there any known breaches of the .NET AppDomain isolation?
Apr
27
comment XSS with a torrent
@Aatif Also, come to think of it, many torrent clients have a web-based interface. Transmission and Hadouken are headless, so a web interface is a common front-end. uTorrent and Deluge also have optional web interfaces. So it is possible for an XSS condition to arise.
Apr
27
comment XSS with a torrent
@Aatif Some clients use a web renderer such as Microsoft's WebBrowser control. I've come across binary apps which are vulnerable to XSS. Since the code executes in the local security domain it is possible to do stuff like load ActiveX components or VBScript if the local security policy has not been hardened. These can be used to run arbitrary code in the same context as the application process (e.g. create an FSO object, drop data into file, ShellExecute it).
Apr
27
revised No internet access using Airbase
Formatting