52,908 reputation
16125218
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 5 months
seen 6 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
10
answered Is Webroot's Business Endpoint Security up to snuff for mobile workforce?
Jan
10
revised Is Webroot's Business Endpoint Security up to snuff for mobile workforce?
fixed typo
Jan
10
comment Should I change the private key when renewing a certificate?
@SteelCityHacker That only becomes an issue if you're running a site with thousands of hits per minute. In most cases you might be unlucky and get a single request during the restart of the Apache service, since it's so fast.
Jan
10
comment Securing my USB flash drive with Truecrypt and FreeOTFE
Nope. You're just adding complexity at that point.
Jan
10
comment Securing my USB flash drive with Truecrypt and FreeOTFE
I personally prefer TrueCrypt, since it's had more attention than FreeOTFE. The best possible accolade any crypto can get is for a large number of cryptographers and security enthusiasts / experts to look at it and agree that it's safe.
Jan
10
comment Securing my USB flash drive with Truecrypt and FreeOTFE
As far as the layered systems issue goes, it's rather complicated. But let's imagine I build a block cipher that computes SHA256(password+block_number) for each block, then xors each plaintext block with the hash for that block. In itself, this is reasonably good crypto as far as self-built ciphers go. In the way it's designed, it works great. But someone decides it's not strong enough, so decides to do two rounds of it. Unfortunately, this results in the ciphertext being identical to the plaintext! Whoops. So using a good cipher in a weird way can result in unexpected problems.
Jan
10
comment Securing my USB flash drive with Truecrypt and FreeOTFE
"if it had aback door or something the attacker still had to pass freeotfe" - no. If the attacker controls TrueCrypt, your machine is entirely compromised. He can just steal the files from your mounted FreeOTFE container.
Jan
10
comment Is it possible to make an xss with only html tags
@Jacco Yup, Rook mentioned that too.
Jan
10
awarded  Electorate
Jan
10
revised How do small businesses handle web app security?
removed cruft + advertising link
Jan
10
comment Should I change the private key when renewing a certificate?
@CodesInChaos It doesn't, but updating any associated client certificates is certainly a lot more work. If I remember correctly, when you update the server cert without changing the key, you can keep all of the client certs with no issue. But if you change the key, you have to renew all of the client certs too.
Jan
10
comment Security comparsion of 3DES and AES
Plus we now have AES extensions in modern processors, which can massively increase the speed of the cipher.
Jan
10
answered Should I change the private key when renewing a certificate?
Jan
10
comment Should I change the private key when renewing a certificate?
There are reasons not to do it, though.
Jan
9
reviewed Close How do private feeds get transferred between two different portals?
Jan
9
comment What exploit types do I need to protect against in PHP?
Holy crap, that's one hell of an answer. Bravo!
Jan
9
comment Does PayPal support a backup code for two-factor auth?
I'm not the downvoter, but I'd guess it's because you're asking for product support, which is borderline off-topic here.
Jan
9
comment Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
@CristianDobre Disk encryption typically does not use CBC. For example, TrueCrypt uses XTS mode.
Jan
9
asked Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
Jan
9
answered Securing my USB flash drive with Truecrypt and FreeOTFE