56,748 reputation
17138233
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 8 months
seen 11 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
10
awarded  Nice Answer
Dec
10
comment Rainbow table concept for Prime numbers
Just as a quick side node: The subtraction part nicely demonstrates an interesting quirk of picking n-bit prime numbers. It's not like generating a random stream of bytes, where each bit has an equal probability of being either 1 or 0. In fact, picking a 512-bit prime whose first 10 bits just happen to be 0 is bad, because you no longer have a 512-bit prime, you have an 502-bit prime. So technically a random n-bit prime is only theoretically random over n-1 bits, with its most significant bit always set to 1. Thankfully the keyspace is so large it doesn't make a difference.
Dec
10
comment Rainbow table concept for Prime numbers
You can't factor primes at all - that's why they're prime. RSA uses semiprimes, which are the product of two primes.
Dec
10
revised Rainbow table concept for Prime numbers
added 152 characters in body
Dec
10
answered Rainbow table concept for Prime numbers
Dec
10
comment Vulnerabilities of Secure Shells
@alanc That's a service on your machine, not SSH itself. If that is involved, the question should've mentioned it.
Dec
10
revised Vulnerabilities of Secure Shells
bullet pointed version
Dec
10
answered Vulnerabilities of Secure Shells
Dec
10
comment How to know which database is behind a web application?
How did I miss that one? Clearly not had enough coffee today...
Dec
10
comment How to know which database is behind a web application?
Haha, cheers. It's from Metal Gear Awesome (warning: nsfw)
Dec
10
comment I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
There's a lot of bad advice here. Manual cleaning of %temp% is bad, you should use Disk Cleanup for that. The advice about the registry doesn't even make any sense; the registry doesn't contain files at all. Even if you meant keys, what do you "clean up" in there? On top of all that, your steps here still don't actually have much benefit, and may actually make the system unstable. Furthermore, it's mostly security theatre - no real security benefit outside misplaced perception. Bad, bad, bad.
Dec
10
revised I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
command
Dec
10
comment Excel 2007 Encryption Strength
@zm15 Yes, it'd still be strong. The iteration count is stored as part of the hash.
Dec
10
revised How to know which database is behind a web application?
added 267 characters in body
Dec
10
answered are there any services to test nmap
Dec
10
reviewed Edit How to increase Windows PowerShell WebAccess security?
Dec
10
revised How to increase Windows PowerShell WebAccess security?
I couldn't understand what the OP wanted; I tried to clean it up so that the question was clearer.
Dec
10
comment How are CVE identifiers assigned and managed?
I'm aware of it. I'm actually reasonably familiar with CVEs, but I figured it'd be nice to have a question on here that'd cover it.
Dec
10
asked How are CVE identifiers assigned and managed?
Dec
10
comment What should I do if I type my password in the address bar, or type password in google search?
You shouldn't be re-using (or even remembering) passwords for most things anyway. That's what we have password managers like KeePass for. In reality you should never really need to remember more than 4 passwords - your system encryption password, your OS login password, your password manager password, and your email account password (allows recovery of most passwords in the case of losing your password database). Everything else goes in your password manager, and is unique + properly random.