Reputation
Next tag badge:
1507/400 score
75/80 answers
Badges
17 155 253
Impact
~2.8m people reached

Feb
24
comment securely destroying data on an external hard drive
@Celeritas If you read the page fully, and do some research elsewhere, this actually turns out not to be a big deal. The flaw is that it follows certain types of filesystem links (e.g. symlink) without warning, and might result in deleting other files if you try to wipe a directory that contains a symlink. Of course, if you're only targeting one file or aren't using symlinks, you're fine. Regardless of the bug, using cipher /W to wipe slackspace is still safe. So for security purposes, it's fine.
Feb
22
awarded  Nice Question
Feb
22
awarded  windows
Feb
18
awarded  Nice Answer
Feb
18
comment Strategies to store/remember very long password?
@daniel.sedlacek If a passphrase is expected then any reasonably smart adversary will try phrases from common books. The Bible is pretty much the go-to source for stuff like that.
Feb
18
reviewed Approve Can my company access my computer via the VPN?
Feb
18
revised The security level in hash function
correction
Feb
18
comment The security level in hash function
Ah yes, I forgot it was sqrt. I was thinking of cracking keys for some reason.
Feb
18
comment What is better, an established framework or a homebrew solution?
It's also worth mentioning that you can pay companies to perform a code security review, either from an external point of view (black box) or from the source itself (white box). These are often useful because they spend all day looking for security holes in products, and usually have very sharp intuition when it comes to spotting areas where potential holes might be.
Feb
18
comment Google Cloud Messaging Spoof
A quick note: It may not be a good idea to refer to Google Cloud Messaging as the abbreviation "GCM" on here, since GCM usually refers to Galois/Counter Mode, which is a mode of operation for block ciphers.
Feb
18
reviewed Approve What is ASN.1 usage in SSL protocl and What's the risk of using it?
Feb
18
answered The security level in hash function
Feb
17
answered Encrypt data within mobile app and send to web service
Feb
17
comment Create a unterminable process in Windows
@SteveS 1,2,3 can be done by any user, 4,5,8,9 require admin, 6,7 require admin and a way to bypass driver signing (disable it or use a signed driver), 10 depends on the ACL of the file you're trying to replace.
Feb
16
comment Create a unterminable process in Windows
They're all equally possible, give or take.
Feb
16
answered Should I install an antivirus on my mobile phone?
Feb
16
comment Should I install an antivirus on my mobile phone?
Welcome to IT Security StackExchange. We have a range of guidelines as to what's appropriate as a question here (which you can read in the FAQ) and product recommendations are off topic. As such, I've removed the final part of your question. Other than that, it's ok. Enjoy your stay here :)
Feb
16
revised Should I install an antivirus on my mobile phone?
Removed request for product recommendation.
Feb
16
answered Create a unterminable process in Windows
Feb
16
revised How does SRP prevent man-in-middle attacks?
Added link to SRP wiki