45,582 reputation
12105191
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 9 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
14
revised BEAST: IIS6: Failing PCI scan - are these ciphers OK?
deleted 4 characters in body; edited title
Dec
14
awarded  Nice Answer
Dec
14
revised windows-dpapi wiki excerpt
added 126 characters in body
Dec
14
revised windows-dpapi wiki description
added 183 characters in body
Dec
14
wiki created windows-dpapi description
Dec
14
wiki created windows-dpapi excerpt
Dec
14
suggested suggested edit on windows-dpapi tag wiki
Dec
14
suggested suggested edit on windows-dpapi tag wiki excerpt
Dec
14
awarded  Custodian
Dec
14
reviewed Reviewed Possible ways to track down anonymous mail senders?
Dec
14
answered Is there a site like plaintextoffenders.com that shames companies that force insecure passwords?
Dec
14
awarded  Good Answer
Dec
14
awarded  cryptography
Dec
13
comment Disclosure in potential loss-of-life situations, with an uncooperative vendor
@KeithS It was an environmental control unit with an air scrubber built in. You can infer the rest yourself ;)
Dec
13
comment What hardware technology (GPU, FPGA) is fastest at generating RSA keys?
Product recommendations are off-topic here.
Dec
13
comment openssl blowfish key limited to 256 bits?
@CodesInChaos I actually trust Twofish more than Threefish, considering the difference in success that has been had in cryptanalysis of both algorithms. +1 on AES though.
Dec
13
comment openssl blowfish key limited to 256 bits?
Any reason you're not using TwoFish? Same low footprint, no patents, but more secure and more commonly used.
Dec
13
answered How secure are passwords that are set via IRC's /nicksrv?
Dec
13
comment Why don't people hash and salt usernames before storing them
Yeah, I've seen this done. It's more of an obscurity mechanism really, because if the password is hashed strongly then it shouldn't be necessary at all.
Dec
13
comment Why don't people hash and salt usernames before storing them
The snark is strong in this one ;)