43,472 reputation
1294172
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 6 months
seen 31 mins ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
20
comment Preventing softwares from leaving traces in Windows | deleting the traces easily
VirtualBox is a free VM solution you can use. I don't know of any open-source alternatives to Sandboxie, but as I noted in my answer it's not a solid solution anyway.
Jan
20
answered Preventing softwares from leaving traces in Windows | deleting the traces easily
Jan
20
comment How is the widespread design of ATM rooms more secure?
What's the question here? Please take some time to actually consider what you want to know, in the context of information security, and edit your question to make this clearer. For example, what's a "widespread design", what's an "ATM room", and how are these things related? Remember that ATM designs and usage practices differ wildly between countries, so we may not have any idea what you're talking about.
Jan
20
comment Is Java relevant to Information Security?
Not just that, but the fact that most security flaw types are agnostic to the underlying programming language. You could equally have buffer overflows in C, C++, and Delphi. You might have poor password storage in any application, regardless of the languages and technologies involved. Even SQL injection is not limited to a particular dialect of SQL.
Jan
20
comment How to know if connection is encrypted
I think they're referring to HTTPS, i.e. HTTP over SSL/TLS.
Jan
20
comment Password stretching using concatenation of hashes
It's a bit of both. Assuming that your code is secret is a bad move (crypto 101 stuff!) and the actual key derivation you're using is weird and may have flaws. Stick to PBKDF2 and other known-good mechanisms.
Jan
20
comment Does sending two different hashes of the same password reduce security?
+1 on the remarks about SSL. It really is a negligible overhead, and the costs (even for a non-free SSL cert) are low.
Jan
20
answered Password stretching using concatenation of hashes
Jan
20
awarded  Nice Answer
Jan
20
awarded  Good Answer
Jan
19
comment A fake phone tech changed my start up password.
My advice is to report this to the police. Unauthorised access is a violation of most countries' computer law (e.g. Computer Misuse Act in the US, Computer Fraud & Abuse Act in the UK). Call your local police station and ask who you should talk to about cyber-crime (that's usually what govm't types call it), and explain the situation. Whilst they won't fix your computer, they can at least pull phone records to identify the perpetrators.
Jan
17
answered Inversed Data Direction on the Stack
Jan
16
comment Meaning of webpage link containing www23
I personally disagree with the downvoting of this question. It may not be requesting advice on rocket surgery, but it's still a valid concern that I'm sure many people have had.
Jan
13
awarded  Necromancer
Jan
3
awarded  Notable Question
Dec
26
awarded  Notable Question
Dec
22
awarded  Popular Question
Dec
22
comment Basic simple encryption with already installed tools
No need to be rude. And yes, I understand that OP is looking for something simple, but sadly there's not much chance of that beyond 7zip.
Dec
22
revised Basic simple encryption with already installed tools
added 95 characters in body
Dec
22
comment Basic simple encryption with already installed tools
As I noted, there's not an option that's pre-installed, but PGP is cross-platform and available in standard package repos. I'll make it 100% clear at the start of the answer if that makes you happy.