48,463 reputation
12118208
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years
seen 6 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
21
comment How does one test AV against zero-day malware?
From the brief and unscientific work I've done on these tests, I'd say one of the most effective ways to test is to write your own malware containing various common and uncommon traits. That way you get the detection without the issues of having the samples spread, or the hassle of honeypotting the real 0day malware.
Dec
21
reviewed Approve suggested edit on passphrase tag wiki
Dec
21
reviewed Approve suggested edit on passphrase tag wiki excerpt
Dec
21
answered Secure login feature with low CPU power
Dec
21
comment How do spammers verify the validity of a huge amount of email addresses?
@JohnU Except most email clients don't show images by default for exactly that reason.
Dec
21
awarded  Nice Answer
Dec
21
answered Reasonable computationally lightweight security?
Dec
21
comment How do spammers verify the validity of a huge amount of email addresses?
@wenzi Yes, sorry, my answer does kinda side-track a little. I figured you were interested in how it's done in various situations.
Dec
21
comment How do I choose whether to trust a particular website?
The term "gut feeling" is an interesting choice. It's commonly used to refer to a purely intuitive analysis of trustworthiness, but in reality you're really drawing on a wide range of subconscious experience in deciding whether or not to trust someone or something. So, when you rely on a "gut feeling", you're actually relying on years of personal and professional experience in dealing with technology. Other people may not have this experience, so their "gut feeling" is likely to be significantly less accurate than yours.
Dec
21
answered How do spammers verify the validity of a huge amount of email addresses?
Dec
21
comment If someone asks to borrow your phone to make a call, what could they do?
I highly doubt a terrorist would borrow someone else's phone, leaving their DNA and fingerprints all over the device, and have a member of the public see their face. Especially when you can buy a cheap pay-as-you-go phone, top it up with cash, use it once, then throw it in a river.
Dec
21
reviewed Reject suggested edit on whitebox tag wiki excerpt
Dec
21
reviewed Reject suggested edit on instant-messaging tag wiki excerpt
Dec
21
reviewed Reject suggested edit on selinux tag wiki excerpt
Dec
21
reviewed Reject suggested edit on wordpress tag wiki excerpt
Dec
21
reviewed Reject suggested edit on pbkdf2 tag wiki excerpt
Dec
21
reviewed Reject suggested edit on passphrase tag wiki excerpt
Dec
21
revised sandbox wiki excerpt
added 28 characters in body
Dec
21
reviewed Approve suggested edit on biometrics tag wiki excerpt
Dec
21
answered If someone asks to borrow your phone to make a call, what could they do?