45,582 reputation
12105191
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 9 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Mar
4
comment Whole system ACK flood attack making internet slow
What's the question?
Mar
4
comment .NET provides 8+ ways to encode data to prevent XSS attacks. Which one should I use when?
It's worth looking at the OWASP ESAPI project, which contains a whole bunch of filtering utilities designed to help prevent XSS in output destined for HTML (inside tags, attributes, etc.), JavaScript, and CSS. Sadly the .NET version isn't quite up-to-speed yet, but it's still usable.
Mar
4
comment How to prevent DHCP Starvation attack?
The trick is to cycle MACs, so that you aren't using more than one at once, but get different leases.
Mar
4
comment How to prevent DHCP Starvation attack?
+1 on this. Often DHCP servers are reluctant to issue a new lease to a new MAC address when a DHCP release has just taken place. This is usually to help keep a device on the same IP if it just glitched out for a moment. By repeatedly cycling request/release across MACs your port only ever has one assigned MAC at any one point in time, but the IPs end up getting thrown into a temporary wait pool until they eventually dry up. It won't be 100% effective, but it'll probably mess the network up a bit.
Mar
4
answered Which is the Best Cipher Mode and Padding Mode for AES Encryption?
Feb
28
awarded  Nice Question
Feb
23
awarded  Nice Answer
Feb
21
awarded  Enlightened
Feb
21
awarded  Nice Answer
Feb
18
comment How hard is it to read flash memory off a chip?
The BP comes with a set of female pins that connect to headers, but you can also buy alternative headers that has hook probes and tweezer clips. I use both. You can also clip various things into the standard headers anyway. It's mainly designed for easy integration into through-hole / breadboard stuff, as it primarily targets the hobbyist market. When I'm dealing with SMD stuff I usually use the tweezer clips (pincer style ones) to hook onto the leads.
Feb
18
comment How hard is it to read flash memory off a chip?
The BusPirate is a device which is designed to be a programmable interface with various bus types, with minimal implementation overhead. It is designed for interfacing with individual components without supporting circuitry. It and the Arduino do two completely different things. Also, the BusPirate is made by Dangerous Prototypes, not TI. If I had a big budget I'd probably still use a BusPirate, simply because it's so easy to use. I would probably buy a proper logic analyser to support it, though.
Feb
17
comment How hard is it to read flash memory off a chip?
@atdre It entirely depends on the flash chip. It could have an SPI or I2C interface, or something totally different. Then on top of that there'll be commands and steps that are unique to that device. It's impossible to give a catch-all. You have to read the datasheet and the BusPirate manual.
Feb
17
awarded  Good Answer
Feb
17
awarded  Nice Answer
Feb
16
answered Security related code in Open Source projects?
Feb
16
asked Internal code-signing certificate on Windows
Feb
10
comment What could be the reason for the high traffic on the local network?
Could be malware, could be staff setting up BitTorrent seeds overnight on their systems. It's very difficult to tell. Where's the traffic going to? A few isolated IPs, or hundreds of different ones? Is it on a common port? Have you looked at the data being sent?
Feb
7
comment Bad practice to have a “god” password?
Why not just have an administrator account that has privileges to modify other users' data?
Feb
7
comment Weird condition in blind SQL injection point, substr() is valid for exactly two chars
Bizarre. Perhaps it's worth running SQLmap through a logging proxy to see what requests it's sending in order to exploit this?
Feb
7
awarded  Nice Answer