58,805 reputation
17146240
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 10 months
seen 12 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
29
comment How can PayPal spoof emails so easily to say it comes from someone else?
I have listened to them before - I was a regular listener back in the mid-2000s, before I knew any better. See Attrition.org's full set of articles about him (the link I provided) for more details. It's widely accepted by the infosec community that he makes up stuff on the spot and spins it into hype, for the purposes of marketing.
Jan
29
awarded  Nice Answer
Jan
29
comment How can PayPal spoof emails so easily to say it comes from someone else?
-1 for not actually providing any content. Also, Steve Gibson is a known charlatan with very little real security knowledge.
Jan
29
comment Which hard disk encryptions schemes are tied to the original hardware?
I've often heard it described as the standard, and I don't know of another free open-source cross-platform solution that's as pervasive as TC is.
Jan
29
revised How to satisfy requirement 10.6 of PCI DSS?
example
Jan
29
answered How to satisfy requirement 10.6 of PCI DSS?
Jan
29
answered Which hard disk encryptions schemes are tied to the original hardware?
Jan
29
revised What goes into an average incident response process for a corporate network?
clarifications
Jan
29
asked What goes into an average incident response process for a corporate network?
Jan
29
answered Debugging and DLL-Injection
Jan
29
comment default.php file found on the server, is this a security threat?
Ok, I've added an update to include a detailed description of how I de-obfuscated it, and the script I built to do the automatic decryption.
Jan
29
revised default.php file found on the server, is this a security threat?
de-obfuscation info
Jan
29
comment default.php file found on the server, is this a security threat?
@AliAhmad I did it in the sandbox, so I don't have it any more, but I'll write something up.
Jan
29
awarded  Guru
Jan
28
comment default.php file found on the server, is this a security threat?
@Michael Read the comments above yours, I just explained exactly that. Essentially I just replaced each eval with a return until it was fully unpacked.
Jan
28
awarded  Good Answer
Jan
28
comment SSD enrcyption with ATA password - AHCI mode?
Even on an i3, AES is ridiculously lightweight. I run TrueCrypt system encryption on an old P4 box with no issues.
Jan
28
awarded  Enlightened
Jan
28
awarded  Nice Answer
Jan
28
comment Due to which reason might a windows 7 password been reset to empty?
Never underestimate a user's ability to break things in stupid ways :)