meta user
network profile
| bio | website | en.wikipedia.org/wiki/… |
|---|---|---|
| location | United Kingdom | |
| age | 25 | |
| visits | member for | 1 year, 8 months |
| seen | Jun 16 at 16:42 | |
| stats | profile views | 2,135 |
Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.
Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly
All answers and comments are encrypted with ROT256-ECB.
Opinions are my own. Advice provided with no warranty.
|
Nov 15 |
comment |
In depth security: splitting key in different places I'll write an answer. |
|
Nov 15 |
comment |
In depth security: splitting key in different places That's not necessary. Just create an independent key for encrypting the data, then xor that key with the user key and an admin key (generated via the passwords and independent salts). |
|
Nov 15 |
answered | Worst-case scenario for ShellExecute(0,“open”,arbitrary_string) |
|
Nov 15 |
comment |
In depth security: splitting key in different places Encryption of what, exactly? If it's user data, why not derive the key from the user's password? |
|
Nov 15 |
answered | Key stretching an hash |
|
Nov 15 |
reviewed | Reject suggested edit on Determining how my Wordpress website was compromised |
|
Nov 15 |
comment |
Use truecrypt to make data unrecoverable @illsecure The available file space on a filesystem isn't equal to the total size of the physical disk. Certain sectors contain metadata, e.g. NTFS journal, which might be used to retrieve tiny fragments of files or at least some file names and creation / modified dates. When you write data to a filesystem, you're at the mercy of the implementation as to whether everything is overwritten. A good example of this is wear levelling on SSDs. A proper shredder wipes at the physical level (sector level) and will remove all traces of data. |
|
Nov 15 |
comment |
Use truecrypt to make data unrecoverable @HenningKlevjer Or the shred command. |
|
Nov 15 |
answered | Is a 3 or 4 digit CVV enough for online transactions? |
|
Nov 15 |
revised |
Is a 3 or 4 digit CVV enough for online transactions? Removed invalid formatting. |
|
Nov 15 |
comment |
Is a 3 or 4 digit CVV enough for online transactions? I don't see where you're getting 2^20 (1,048,576) tries from. The keyspace for any 4 digit number is 10000 at most. |
|
Nov 15 |
comment |
Use truecrypt to make data unrecoverable That's not a secure way to do it. TC isn't guaranteed to wipe all sectors - there may be metadata left in the NTFS journal or other areas of the disk that aren't occupied by file data. |
|
Nov 15 |
comment |
Use truecrypt to make data unrecoverable Perhaps I wasn't clear. I was confused as to why you were using TC to shred your disk instead of a shredding tool - it made the question confusing as a whole. |
|
Nov 15 |
comment |
Use truecrypt to make data unrecoverable Your question is extremely vague. What are you trying to do? |
|
Nov 15 |
revised |
Use truecrypt to make data unrecoverable edited body |
|
Nov 14 |
comment |
How to restrict skype file transfer outside of LAN @ThiefMaster It depends on what the developer is doing. Even if they do end up being an administrative user, they should enable UAC. |
|
Nov 14 |
comment |
Using PDF instead of doc(x) or html: safer? @ewanm89 I didn't say Office was better, but there are plenty of alternative PDF viewers out there, including some cross platform and open source ones with a much better security track record. |
|
Nov 14 |
comment |
Using PDF instead of doc(x) or html: safer? I'm sure you'll be perfectly safe. |
|
Nov 14 |
comment |
Using PDF instead of doc(x) or html: safer? As long as you're not opening it with Adobe PDF Reader or Acrobat, then maybe. |
|
Nov 14 |
comment |
How to restrict skype file transfer outside of LAN @ewanm89 Nothing. It's about proving intent. It's potentially possible for a user to accidentally send a confidential file over Skype to a 3rd party due to a drag-drop misclick, but if they intentionally send source code over Skype you've got better evidence for a prosecution. Skype logs conversations to %AppData%\Skype\main.db (along with other stuff) so you could set up a hard link to a networked drive and have that file regularly backed up. |
