52,973 reputation
16125218
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 5 months
seen 13 mins ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
9
asked Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
Jan
9
answered Securing my USB flash drive with Truecrypt and FreeOTFE
Jan
9
comment Security measures against packet sniffing
It might be worth mentioning network-level crypto such as IPsec.
Jan
8
reviewed Approve How to explain computer security to low-grade students?
Jan
8
comment What is the most secure way for two people to communicate?
@tylerl How would they communicate?
Jan
8
reviewed Close How can I use many LiveIDs (or Microsoft Accounts) at the same time?
Jan
8
comment What Checkstyle or Findbugs rules detect common vulnerabilities?
As fatfredyy pointed out, these tools aren't designed to check for vulnerabilities. If it's a commercial project, I recommend checking out Veracode. They do some really nice work with black-box static analysis, and offer white-box source reviews too. (disclaimer: no affiliation with the company at all, your mileage may vary, I just like their work)
Jan
8
comment If we know CAPTCHA can be beat, why are we still using them?
Best way to think of it, imo, is as a way to prioritise your time. If you can block 85% of automated bots with a CAPTCHA, that means you only have to do manual work for the other 15%, rather than all of them.
Jan
8
revised If we know CAPTCHA can be beat, why are we still using them?
s/server/serve/
Jan
8
comment What is the most secure way for two people to communicate?
I haven't done much research into it, but Torchat sounds like it might be exactly what you want.
Jan
7
awarded  Enlightened
Jan
7
awarded  Nice Answer
Jan
7
comment Slot machine segfault: what can we determine?
@SteveS Nope, they just specialise in small speakers, which this slot machine just happens to use. The manufacturer of this slot machine is WMS.
Jan
7
comment Pitfalls of SSD encryption
@ThomasPornin Yes, that's what I meant. There are tools to perform the secure delete operation for most major OSes.
Jan
7
comment Filling the disk with random data prior to encryption?
@ThomasPornin Whoops, yeah, I did mean BEAST. Thanks for the correction.
Jan
7
comment Why would someone want to encrypt RSS feeds?
Sure, SSL would be useful there. You'd need to set up client certificates to authenticate yourself, too.
Jan
7
answered Why would someone want to encrypt RSS feeds?
Jan
7
comment Why would someone want to encrypt RSS feeds?
By "public key encryption system" do you mean SSL, or a custom crypto scheme? If it's the latter, you're going to have to give us some more information about how that system works.
Jan
7
revised Why would someone want to encrypt RSS feeds?
formatting
Jan
7
answered Different types of segmentation faults in Linux