53,628 reputation
17128220
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 6 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
7
comment Filling the disk with random data prior to encryption?
@ThomasPornin Whoops, yeah, I did mean BEAST. Thanks for the correction.
Jan
7
comment Why would someone want to encrypt RSS feeds?
Sure, SSL would be useful there. You'd need to set up client certificates to authenticate yourself, too.
Jan
7
answered Why would someone want to encrypt RSS feeds?
Jan
7
comment Why would someone want to encrypt RSS feeds?
By "public key encryption system" do you mean SSL, or a custom crypto scheme? If it's the latter, you're going to have to give us some more information about how that system works.
Jan
7
revised Why would someone want to encrypt RSS feeds?
formatting
Jan
7
answered Different types of segmentation faults in Linux
Jan
7
comment Filling the disk with random data prior to encryption?
It depends, really. The recent attacks such as CRIME on AES-CBC might make it practical, but it really depends on the mode of operation.
Jan
7
revised Metasploit Wifi Modules Asking for lorcon2
Formatting
Jan
7
awarded  Custodian
Jan
7
reviewed Leave Open How can I protect my browser from being compromised?
Jan
7
comment Slot machine segfault: what can we determine?
If that was the case, eth0 probably wouldn't have a 10.x.x.x address; it'd probably mark itself as down.
Jan
7
comment Strange request URI with lot of + (spaces) and “chosen nickname”
It's probably automated. They'll be using a Google Dork or a similar pattern-based search that is likely just throwing a false positive on your site. Either way, they're clearly not very smart.
Jan
7
revised How to fuzz on FreeFloat FTP server using SPIKE Fuzzing?
code formatting
Jan
7
answered Slot machine segfault: what can we determine?
Jan
7
answered Strange request URI with lot of + (spaces) and “chosen nickname”
Jan
7
answered Filling the disk with random data prior to encryption?
Jan
7
answered Pitfalls of SSD encryption
Jan
7
comment How isolated are files on a VirtualBox virtual machine from the host filesystem?
If you're using an SSD, your OS should automatically detect that a standard volume format operation should be done via the proper SSD-specific firmware command. This will wipe the entire SSD by resetting the internal encryption key, rendering all data useless and unrecoverable at the hardware level. If you're only trying to destroy the virtual machine, that's a different story. When I say "overwriting sectors", I mean overwriting the sectors on the host disk that are used to store the virtual disk file - shred / sdelete will do that job fine.
Jan
7
comment Why is it hard to catch cybercriminals?
"The antenna they have is used to pick up hundreds of WiFi networks throughout the city" - this implies a relatively static location and a powerful antenna, which isn't a particularly reliable method of communication with low-power APs. Even if you were to move around, it'd be trivial to identify the IP and physical address of the attacks, then identify vehicles common to the area via CCTV. Your proposed situation is unlikely and flawed, especially when compared to the answers on the Lulzsec/Anon question.
Jan
7
awarded  authentication