meta user
network profile
| bio | website | en.wikipedia.org/wiki/… |
|---|---|---|
| location | United Kingdom | |
| age | 25 | |
| visits | member for | 1 year, 8 months |
| seen | Jun 16 at 16:42 | |
| stats | profile views | 2,135 |
Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.
Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly
All answers and comments are encrypted with ROT256-ECB.
Opinions are my own. Advice provided with no warranty.
|
Jun 16 |
comment |
using two passwords for normal and security critical functions 2FA can be something as simple as uploading a keyfile. Costs nothing and is easy to implement. |
|
Jun 13 |
comment |
Hardware Level Write Protection for a CD-R @onelineproof My understanding of "finalisation" from a CD-R perspective is that either the outer cylinder has an "EOF" marker written to it, and the inner cylinder has metadata written to it that says which cylinder the data ends at. As such, it may be possible to write data past that marker point, but the reader won't detect that it's there. |
|
Jun 13 |
comment |
ASLR Randomization BSS Yes and no. BSS isn't randomised by design, but as long as DEP is enabled (which is a prerequisite of ASLR being effective) then BSS is no threat - it's non-executable memory, and doesn't contain anything that can be particularly useful for a ROP chain. |
|
May 31 |
comment |
GPG is great and we could use it more. Whats missing? Sorry, but as the FAQ says, we don't allow open-ended subjective discussions here. |
|
May 30 |
comment |
Does Chrome OS Allow Executable Files? I assume you're talking about a lack of general purpose computing on the device? |
|
May 30 |
comment |
Securing a laptop against attacks (article) @Sulla Linux has plenty of sensitive data in RAM, so yes. |
|
May 29 |
comment |
Cross Site Scripting without special chars let us continue this discussion in chat |
|
May 29 |
comment |
Cross Site Scripting without special chars @Nucklear There are no parentheses in the injected code. The CSS file is stored on a 3rd party site and will therefore not be subject to the WAF filters. The bottom code I showed was meant to be the contents of xss.css |
|
May 29 |
comment |
Cross Site Scripting without special chars @Nucklear I've added a second method using off-site CSS, with no = or parenths. |
|
May 29 |
comment |
Cross Site Scripting without special chars @Nucklear Did you edit? I don't remember seeing the equals sign the first time around... |
|
May 29 |
comment |
What attacks, if any, are possible against Security Support Provider Interface (SSPI)? I didn't downvote, but I suspect whoever did did so because you didn't provide any evidence for your claims. |
|
May 29 |
comment |
What attacks, if any, are possible against Security Support Provider Interface (SSPI)? I think you misunderstood impersonation. On Windows, the term is used to mean a handle or object created under the context of another user whose credentials (or evidence, to use the official term) you have. For example, an administrative user can create a process that impersonates the limited user Bob, using evidence that he is an administrator. The admin doesn't need to know Bob's password in this case. Bob can't do the opposite (i.e. impersonate admin) because Bob can't provide any evidence that he's allowed to do so, but he may be able to impersonate Alice if he knows her credentials. |
|
May 29 |
comment |
Best practices for hardening nginx web server on linux What you're asking requires a book and several months worth of studying, not an answer on StackExchange. |
|
May 29 |
comment |
How is an HTTPS login secure when pages use HTTP? There's a great blog post by Nick Craver on the various challenges there are to making a site like StackExchange use site-wide SSL: nickcraver.com/blog/2013/04/23/… - a lot of this applies to sites like eBay too. |
|
May 28 |
comment |
Why can a TOR exit node decrypt data, but not the entry node? @PeteyB There is no "return trip". The routing creates a TCP connection chain, which is full-duplex. |
|
May 28 |
comment |
Why can a TOR exit node decrypt data, but not the entry node? +1 just for the image. I've been looking for a good visual representation of Tor onion routing for a long time. |
|
May 28 |
comment |
Best practices for integrating external javascript? The most important question is why you need it to be external? Can you not host it locally? |
|
May 28 |
comment |
How do I add API keys to recon-ng? Tool support is mainly off-topic here. You also haven't given us any details (e.g. the actual error message) or what kind of API key you're trying to add. |
|
May 28 |
comment |
How do I verify versions of Adobe? Try sending a long request (e.g. example.com/?AAAAAAAAAAA... with 4000+ 'A's) to force a HTTP 414. Almost always leaks the version through such error responses. |
|
May 28 |
comment |
when do we need SSL/HTTPS? Possible duplicate of Does not having https moot this entire site? - also see this, this, this, etc. |
