meta user
network profile
| bio | website | en.wikipedia.org/wiki/… |
|---|---|---|
| location | United Kingdom | |
| age | 25 | |
| visits | member for | 1 year, 7 months |
| seen | 2 days ago | |
| stats | profile views | 2,021 |
Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.
Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly
All answers and comments are encrypted with ROT256-ECB.
Opinions are my own. Advice provided with no warranty.
|
Nov 7 |
revised |
Spoofing USSD messages Added definition links |
|
Nov 7 |
answered | Key Exchange using PKI |
|
Nov 7 |
revised |
Attacking an office printer? A few extras. |
|
Nov 7 |
comment |
How should permissions be stored? @Rook Intuition. Regardless, the structure can be trivially translated into flat-files or NoSQL. |
|
Nov 7 |
awarded | network |
|
Nov 6 |
awarded | Guru |
|
Nov 6 |
comment |
Attacking an office printer? @k1DBLITZ It's worse than that. It usually stores it onto a temp filesystem, which may not even be a ramdisk. Often the printing operations are dispatched by a printing daemon to maintain asynchronous operation. You'll sometimes find that certain printing operations are just shell scripts that log their status to a file, which the daemon reads back out for job status reporting. |
|
Nov 6 |
awarded | Good Answer |
|
Nov 6 |
awarded | Nice Answer |
|
Nov 6 |
answered | Attacking an office printer? |
|
Nov 6 |
comment |
Attacking an office printer? You'd be surprised how much fun you can have with printers and photocopiers ;) |
|
Nov 6 |
comment |
How can a web application protect IE users when this browser doesn't support HSTS? Damn, that's a hard one. I'm trying to think of ways to enforce this without browser support, but at the end of the day an attacker can always MitM them. |
|
Nov 6 |
revised |
HSTS extra security over HTTPS s/on/of/ |
|
Nov 6 |
reviewed | Edit suggested edit on What software can I used to edit and replay packets? |
|
Nov 6 |
revised |
What software can I used to edit and replay packets? refactored question |
|
Nov 6 |
comment |
What is HiASLR? @kiran There are some memory overheads in kernel ASLR, but HiASLR is about user-mode ASLR. Kernel ASLR doesn't deal with virtual addresses, so any randomisation has to either map an allocation to a random physical address (potentially causing physical memory fragmentation problems) or allocate more memory and offset the "real" allocation at a random position in that memory block. The latter is common in stack randomisation. There are tricks to make kernel heap randomisation more manageable (e.g. size-category allocation pools) but these are beyond the scope of this question. |
|
Nov 6 |
comment |
What is HiASLR? @kiran The complexity comes in when randomising heap allocations, since the virtual memory space may become fragmented if lots of small allocations and deallocations are made. In reference to the legacy problem, some badly written non-ASLR-aware applications assume that two heap allocations made in sequence are given predictable contiguous virtual addresses (which was common on Windows XP), and crash when ASLR is force-enabled. |
|
Nov 6 |
comment |
What is HiASLR? @kiran The randomisation requires a negligible amount of extra physical memory to store the offsets, as part of the kernel structures that represent processes, modules, threads, heaps, etc. In the big picture, it's a minuscule amount of memory. Remember that ASLR randomises the virtual memory space of processes, and virtual memory pages are mapped, so two pages at 0102b000 and 8f000000 in the same process might be mapped to 7fffffff:0e000000 and 7fffffff:0e001000 in physical memory - no extra memory is needed. |
|
Nov 6 |
comment |
File upload vulnerability: rename solution? @Gilles I don't see how that's the case, since he said it excludes SHA-1 and MD5, which a diversification wouldn't cause an exclusion of. |
|
Nov 6 |
answered | How should permissions be stored? |
