53,628 reputation
17128220
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 6 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
10
answered Should I change the private key when renewing a certificate?
Jan
10
comment Should I change the private key when renewing a certificate?
There are reasons not to do it, though.
Jan
9
reviewed Close How do private feeds get transferred between two different portals?
Jan
9
comment What exploit types do I need to protect against in PHP?
Holy crap, that's one hell of an answer. Bravo!
Jan
9
comment Does PayPal support a backup code for two-factor auth?
I'm not the downvoter, but I'd guess it's because you're asking for product support, which is borderline off-topic here.
Jan
9
comment Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
@CristianDobre Disk encryption typically does not use CBC. For example, TrueCrypt uses XTS mode.
Jan
9
asked Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
Jan
9
answered Securing my USB flash drive with Truecrypt and FreeOTFE
Jan
9
comment Security measures against packet sniffing
It might be worth mentioning network-level crypto such as IPsec.
Jan
8
reviewed Approve How to explain computer security to low-grade students?
Jan
8
comment What is the most secure way for two people to communicate?
@tylerl How would they communicate?
Jan
8
reviewed Close How can I use many LiveIDs (or Microsoft Accounts) at the same time?
Jan
8
comment What Checkstyle or Findbugs rules detect common vulnerabilities?
As fatfredyy pointed out, these tools aren't designed to check for vulnerabilities. If it's a commercial project, I recommend checking out Veracode. They do some really nice work with black-box static analysis, and offer white-box source reviews too. (disclaimer: no affiliation with the company at all, your mileage may vary, I just like their work)
Jan
8
comment If we know CAPTCHA can be beat, why are we still using them?
Best way to think of it, imo, is as a way to prioritise your time. If you can block 85% of automated bots with a CAPTCHA, that means you only have to do manual work for the other 15%, rather than all of them.
Jan
8
revised If we know CAPTCHA can be beat, why are we still using them?
s/server/serve/
Jan
8
comment What is the most secure way for two people to communicate?
I haven't done much research into it, but Torchat sounds like it might be exactly what you want.
Jan
7
awarded  Enlightened
Jan
7
awarded  Nice Answer
Jan
7
comment Slot machine segfault: what can we determine?
@SteveS Nope, they just specialise in small speakers, which this slot machine just happens to use. The manufacturer of this slot machine is WMS.
Jan
7
comment Pitfalls of SSD encryption
@ThomasPornin Yes, that's what I meant. There are tools to perform the secure delete operation for most major OSes.