53,628 reputation
17128220
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 6 months
seen 3 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Nov
28
comment PGP: How is it possible for me to read a sent mail, encrypted by me with the recipient's public key?
I'd imagine Thunderbird's local copy (in your outbox) either isn't encrypted, or is encrypted using your key, whereas the copy sent over the internet is encrypted with the recipient's public key.
Nov
28
comment Another method to erase hard drives securely?
The real solution is shred.
Nov
28
answered Any good products that could crypt the files stored in laptops?
Nov
28
comment Fake email sent through newsletter service: how to know who sent them?
Or, if you're not law enforcement... Step 1: email server headers. Step 2: Police. In the US it's a violation of the CAN-SPAM act to send unsolicited marketing or scam emails.
Nov
28
comment Another method to erase hard drives securely?
My point is that the key derivation algorithm used to turn the password into a volume header key is computationally expensive enough to make bruteforce infeasible, even for moderately secure passwords.
Nov
28
comment Another method to erase hard drives securely?
@ekaj TrueCrypt overwrites the entire drive with random data, not encrypted data. It does so to make the encrypted volume data indistinguishable from "empty" areas of the drive. In the process, it overwrites any latent data on the disk's sectors. If you forget your password, and that password isn't trivial, there's very little chance of anyone cracking it. The FBI had a case where they dedicated a year's worth of computing time to cracking a single TC volume password, and never got it. Eventually the suspect gave it up (I don't know the details) and it was only 9 characters. Nuff said.
Nov
28
comment Strength of WEP, WPA and WPA 2 PSK
WEP is better than no security at all in cases where you don't want your neighbours using it, assuming said neighbours aren't the types to know the difference between WEP and WPA.
Nov
27
awarded  Convention
Nov
27
revised Increased security with keepass
added 479 characters in body
Nov
27
revised How can I send emails anonymously?
General proofread - grammar, spelling, etc.
Nov
27
accepted Added security risks that come with 3-tier software architecture
Nov
27
accepted Theory X vs Theory Y in social engineering
Nov
27
accepted How would I go about rebuilding the IAT of a packed executable?
Nov
27
accepted How do you explain the necessity of “nuke it from orbit” to management and users?
Nov
27
comment DoS anomaly-based detection: simplest approach beside simple threshold
A user giving you an answer doesn't mean it's on-topic. In fact, D.W. was kind enough to give you an answer despite it being off-topic. Future questions about statistical analysis will likely be closed though.
Nov
27
reviewed Approve What security resources should a white-hat *developer* follow these days?
Nov
27
asked Better way to import Win32 APIs from injected shellcode
Nov
27
comment DoS anomaly-based detection: simplest approach beside simple threshold
The fact that it's focused on DoS attacks is incidental; I could ask "How do I get my staff to stop complaining about password complexity requirements?" and it'd be off topic because it's a workplace question. Just because you're including a security term in your question doesn't mean it's about security. Your question would probably be better on Stats.SE, as long as you focus on the mathematical parts you're interested in.
Nov
27
awarded  Nice Question
Nov
26
reviewed Reject Is Google spying on all of us?