Reputation
67,457
Next tag badge:
655/400 score
76/80 answers
Badges
19 169 260
Newest
 Good Answer
Impact
~3.1m people reached

Mar
27
comment How long it will take to crack a RAR password?
For anyone wondering the significance of that number, it's just 0x40000, or 2^18.
Mar
25
comment Keyloggers - Ports used by keyloggers
I think it's a poor heuristic. Just advise the user to keep up to date on OS and software updates, run an AV, and not click dodgy stuff.
Mar
25
answered Keyloggers - Ports used by keyloggers
Mar
24
revised How to use USB-Stick instead of passphrase?
fix KeeAgent requirement + added link to PuttyAgent for 1.x support
Mar
24
answered What is the best way to protect a captive portal againt MAC spoofing
Mar
19
comment Evaluating candidates for Hacker/Pen Test Positions
If you're looking to hire a penetration testing contractor in the UK, the standard is CREST accreditation.
Mar
19
revised Stop code injections into page code
added question body
Mar
19
comment Why are GPUs so good at cracking passwords?
@lynks It's difficult to directly correlate between the idea of GPU internals and traditional cores, but you could describe each stream processor as a core. I'll admit I didn't realise modern GPUs had so many stream processors though. The main difference is that GPU cores tend to operate in blocks in order to perform a particular task, with certain special bus types joining them together, whereas CPU cores are practically independent.
Mar
19
comment Why are GPUs so good at cracking passwords?
A GPU tends not to have thousands of cores, but hundreds is accurate.
Mar
18
reviewed Reject Why shouldn't we roll our own?
Mar
18
comment Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?
What has PCI DSS got to do with anything?
Mar
18
reviewed Approve Is this an example of XSS attack?
Mar
17
comment Is it safe to sync private keys between iOS devices using iCloud?
Sure. But at that point it's probably easier to just get them to type the OAuth token in on each side ;)
Mar
17
revised Is it safe to sync private keys between iOS devices using iCloud?
removed unrelated bit of text I forgot to cut
Mar
17
comment When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
Sorry, I meant encryption of stored keys, i.e. encryption of keys added to the TPM rather than "special" keys like the SRK.
Mar
17
answered Is it safe to sync private keys between iOS devices using iCloud?
Mar
17
answered When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
Mar
17
comment csrss.exe process
A little clarification: csrss.exe is the Client/Server Runtime SubSystem. On NT5 systems (e.g. XP), a single process handled all requests. In NT6 (e.g. Vista, Win7) this was changed. The session manager subsystem (smss.exe) spawns a csrss process at boot time to handle requests from session 0 processes, i.e. processes owned by the system and not by any logged in user. On a server that doesn't allow interactive users, this will be the only csrss process. When an interactive user logs on, it gets its own csrss process for its session. If 6 users are logged on, there will be 7 csrss processes.
Mar
17
answered Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?
Mar
17
comment Concrete figures on password cracking in the wild
@Gilles Often they're purposefully mis-spelling things to target only the most gullible people.