43,437 reputation
1294172
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 6 months
seen Apr 11 at 12:45

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
11
answered Banking application login leaks information
Dec
11
comment Banking application login leaks information
@GdD From the sounds of it, the attacker may not even need to do that.
Dec
11
comment Banking application login leaks information
It allows an attacker to enumerate all usernames and "security" images. Even easier for targeted attacks. Not secure at all; in fact it's giving users a false sense of security.
Dec
11
comment Rainbow table concept for Prime numbers
Precisely. It's a catch 22.
Dec
11
comment Rainbow table concept for Prime numbers
@lynks A rainbow table reduces its space via chaining inputs, through a reduction function. As Jeff Ferland pointed out, there is no reduction function for such values. If we stick to pure chaining, you need to store both of the factors, which will exceed n bits anyway.
Dec
11
answered Impact of Quantum Computers, other than new algorithms
Dec
11
comment Vulnerabilities of Secure Shells
@alanc Which you configured. OP doesn't mention X11 forwarding, so it's out of scope. Would you also like me to cover the potential vulnerabilities of FTP, SMB, NetBIOS, HTTP servers, etc. on the client machine? They're also services that can be connected to. It's simply not feasible (or constructive) to cover every single out-of-band vector in response to this question.
Dec
11
comment Encrypting data for Android mobile app
YES, there absolutely is tangible harm in shifting the data to the cloud. As ruled recently, you have no rights to your data in the cloud, so the US govm't can seize, destroy, modify or distribute that data in any way they like. Encryption will prevent them from reading it in most cases, but you most certainly lose all of the integrity and reliability of your data.
Dec
11
revised Rainbow table concept for Prime numbers
Added a part about an estimate.
Dec
11
comment Rainbow table concept for Prime numbers
@DietrichEpp Yes, that is actually an important distinction. I'll update.
Dec
11
awarded  Enlightened
Dec
10
awarded  Nice Answer
Dec
10
comment Rainbow table concept for Prime numbers
Just as a quick side node: The subtraction part nicely demonstrates an interesting quirk of picking n-bit prime numbers. It's not like generating a random stream of bytes, where each bit has an equal probability of being either 1 or 0. In fact, picking a 512-bit prime whose first 10 bits just happen to be 0 is bad, because you no longer have a 512-bit prime, you have an 502-bit prime. So technically a random n-bit prime is only theoretically random over n-1 bits, with its most significant bit always set to 1. Thankfully the keyspace is so large it doesn't make a difference.
Dec
10
comment Rainbow table concept for Prime numbers
You can't factor primes at all - that's why they're prime. RSA uses semiprimes, which are the product of two primes.
Dec
10
revised Rainbow table concept for Prime numbers
added 152 characters in body
Dec
10
answered Rainbow table concept for Prime numbers
Dec
10
comment Vulnerabilities of Secure Shells
@alanc That's a service on your machine, not SSH itself. If that is involved, the question should've mentioned it.
Dec
10
revised Vulnerabilities of Secure Shells
bullet pointed version
Dec
10
answered Vulnerabilities of Secure Shells
Dec
10
comment How to know which database is behind a web application?
How did I miss that one? Clearly not had enough coffee today...