55,583 reputation
17133228
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 7 months
seen 53 mins ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
24
asked What should I know about SPDY before enabling it?
Jan
24
asked Is AES-GCM recommended for SSL?
Jan
24
comment Is encryption of Onion Proxy possible?
Using a Tor hidden service is a good way to mitigate that risk. Either that, or use a VPN with IPsec tunnelling.
Jan
24
comment Disadvantages of HTTP GET/POST Flooding Attack?
Sure, but OP asked about disadvantages.
Jan
24
answered Is encryption of Onion Proxy possible?
Jan
24
answered Disadvantages of HTTP GET/POST Flooding Attack?
Jan
24
revised Disadvantages of HTTP GET/POST Flooding Attack?
removed cruft
Jan
24
comment Disadvantages of HTTP GET/POST Flooding Attack?
Disadvantages in what sense? I would consider such a DoS attack to be a bad thing in pretty much every sense.
Jan
23
reviewed Close Best Practice: “One per-user ssh key” or “multiple per-host ssh keys”
Jan
23
reviewed Close Penetration testing against an ignorant target - Is it legal?
Jan
23
reviewed Close Foolproof Jailbreak detection?
Jan
23
reviewed Close Backup TrueCrypt hidden volume
Jan
23
reviewed Leave Open is it easier to get the original password if you have multiple hashes of it?
Jan
23
reviewed Close Safely transfer UserID among different Subdomains
Jan
23
comment is it easier to get the original password if you have multiple hashes of it?
Yes, it's as weak as the fastest / weakest hash function used.
Jan
22
comment Is this code harmful? Why?
A quick Google search for "ISP sidepage.co" shows that a few people have been complaining about it online. Contact your ISP and ask them if they're injecting it, and if so ask them to opt you out.
Jan
22
comment Is this code harmful? Why?
I'd guess that it's the ISP then.
Jan
22
answered XSS risk for an application which can be accessed from localhost only
Jan
22
comment is RDP7.0 authentication process secure enough?
Secure enough for what? All security risk is relative to the attack profiles applicable to your environment.
Jan
22
answered Is this code harmful? Why?