49,253 reputation
14120210
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years, 1 month
seen Nov 12 at 0:16

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
24
awarded  Epic
Dec
23
comment Security threats of wireless charging?
As a quick summary: the device can only pull 100mA to 150mA without negotiation with the charger, so a device is required in order to perform that negotiation. Some modern devices don't require it, but many do. As such, there is often a transfer of data.
Dec
23
answered Security threats of wireless charging?
Dec
23
comment Security threats of wireless charging?
I'm adding an answer that'll cover it.
Dec
23
comment Security threats of wireless charging?
This actually isn't true, for the mostpart. Modern chargers are much more complicated.
Dec
23
revised How Chrome avoids sslstrip?
Added link to HSTS
Dec
23
revised Doesn't adding requirements to a password, such as must contain 2 digits, decrease the strength?
added 111 characters in body
Dec
23
comment Which Wifi encryption method is secure?
Welcome to the world of being an Apple customer. Please place your wallet in the receptacle provided and bend over the examiner's table.
Dec
23
answered Doesn't adding requirements to a password, such as must contain 2 digits, decrease the strength?
Dec
23
answered How much should I care about the iOS/Android version when pentesting mobile app?
Dec
23
awarded  Good Answer
Dec
22
comment Security concern to implement a web based remote desktop
And at that point you're probably better off using a native Remote Desktop solution like RDP or VNC, over the VPN.
Dec
22
comment If someone asks to borrow your phone to make a call, what could they do?
When I ran into some bad charges on my PAYG phone, it was very difficult to dispute them. It may be easier on contract, but I don't know. It's a YMMV thing. As far as links go, I don't have any atm (I'm using my tablet right now) but I can try to dig some yup later.
Dec
21
comment How does one test AV against zero-day malware?
From the brief and unscientific work I've done on these tests, I'd say one of the most effective ways to test is to write your own malware containing various common and uncommon traits. That way you get the detection without the issues of having the samples spread, or the hassle of honeypotting the real 0day malware.
Dec
21
reviewed Approve suggested edit on passphrase tag wiki
Dec
21
reviewed Approve suggested edit on passphrase tag wiki excerpt
Dec
21
answered Secure login feature with low CPU power
Dec
21
comment How do spammers verify the validity of a huge amount of email addresses?
@JohnU Except most email clients don't show images by default for exactly that reason.
Dec
21
awarded  Nice Answer
Dec
21
answered Reasonable computationally lightweight security?