45,582 reputation
12105191
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 9 months
seen 2 days ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
11
answered Impact of Quantum Computers, other than new algorithms
Dec
11
comment Vulnerabilities of Secure Shells
@alanc Which you configured. OP doesn't mention X11 forwarding, so it's out of scope. Would you also like me to cover the potential vulnerabilities of FTP, SMB, NetBIOS, HTTP servers, etc. on the client machine? They're also services that can be connected to. It's simply not feasible (or constructive) to cover every single out-of-band vector in response to this question.
Dec
11
comment Encrypting data for Android mobile app
YES, there absolutely is tangible harm in shifting the data to the cloud. As ruled recently, you have no rights to your data in the cloud, so the US govm't can seize, destroy, modify or distribute that data in any way they like. Encryption will prevent them from reading it in most cases, but you most certainly lose all of the integrity and reliability of your data.
Dec
11
revised Rainbow table concept for Prime numbers
Added a part about an estimate.
Dec
11
comment Rainbow table concept for Prime numbers
@DietrichEpp Yes, that is actually an important distinction. I'll update.
Dec
11
awarded  Enlightened
Dec
10
awarded  Nice Answer
Dec
10
comment Rainbow table concept for Prime numbers
Just as a quick side node: The subtraction part nicely demonstrates an interesting quirk of picking n-bit prime numbers. It's not like generating a random stream of bytes, where each bit has an equal probability of being either 1 or 0. In fact, picking a 512-bit prime whose first 10 bits just happen to be 0 is bad, because you no longer have a 512-bit prime, you have an 502-bit prime. So technically a random n-bit prime is only theoretically random over n-1 bits, with its most significant bit always set to 1. Thankfully the keyspace is so large it doesn't make a difference.
Dec
10
comment Rainbow table concept for Prime numbers
You can't factor primes at all - that's why they're prime. RSA uses semiprimes, which are the product of two primes.
Dec
10
revised Rainbow table concept for Prime numbers
added 152 characters in body
Dec
10
answered Rainbow table concept for Prime numbers
Dec
10
comment Vulnerabilities of Secure Shells
@alanc That's a service on your machine, not SSH itself. If that is involved, the question should've mentioned it.
Dec
10
revised Vulnerabilities of Secure Shells
bullet pointed version
Dec
10
answered Vulnerabilities of Secure Shells
Dec
10
comment How to know which database is behind a web application?
How did I miss that one? Clearly not had enough coffee today...
Dec
10
comment How to know which database is behind a web application?
Haha, cheers. It's from Metal Gear Awesome (warning: nsfw)
Dec
10
comment I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
There's a lot of bad advice here. Manual cleaning of %temp% is bad, you should use Disk Cleanup for that. The advice about the registry doesn't even make any sense; the registry doesn't contain files at all. Even if you meant keys, what do you "clean up" in there? On top of all that, your steps here still don't actually have much benefit, and may actually make the system unstable. Furthermore, it's mostly security theatre - no real security benefit outside misplaced perception. Bad, bad, bad.
Dec
10
revised I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
command
Dec
10
comment Excel 2007 Encryption Strength
@zm15 Yes, it'd still be strong. The iteration count is stored as part of the hash.
Dec
10
revised How to know which database is behind a web application?
added 267 characters in body