46,998 reputation
12109197
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 11 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jun
10
comment Is cryptography possible without volatile memory?
CPU registers and cache are certainly volatile.
Jun
9
comment If md5 is only insecure because of its speed, why doesn't this workaround make it reasonably secure?
Salts and peppers do not change the computational complexity of a hash-based system significantly. They are designed to prevent against precomputation attacks such as Rainbow Tables.
Jun
6
comment How to detect the so-called “undetectable” Gameover Zeus?
I like that you linked the five "publications" I'd avoid for any balanced and sane view on the matter. Especially the Daily Mail... seriously? I direct you to the Daily Mail Song.
Jun
6
comment XSS prevention by black-listing
Why not just use an actual content filtering function from your web language? Or OWASP's filter engine?
May
30
comment Who can carry out Man-in-the-Middle (MITM) attacks?
MitM is usually limited to people on the same local network as you, but that might be anyone if you're using open wifi (guy with a laptop at Starbucks), or are in a work environment (malicious insider). But anyone can do a MitM across the internet if they happen to luck out on poorly configured DNS servers or bad passwords on the registrar account. Also, the WiFi hijacking one is trivial - you can buy off-the-shelf devices that do it.
May
27
comment Does using the same encryption algorithm multiple times make a difference?
ROT256-ECB is vastly superior. It's what I encrypt all of my answers with.
May
27
comment libraries alternative to gcc stack-protector / fortity source feature on linux
Surely those features aren't reliant on linking a library? I was under the impression that they're features of the compiler rather than features of libc.
May
27
comment Ethical question regarding accessible sensitive data at school
@Anonymous I'd say deliver it to the administrative head for the school (e.g. headteacher / principal). They'll forward it on to tech once they've decided how to handle it. Sending it direct to tech feels like you're going "around" the system a bit.
May
26
comment Does using the same encryption algorithm multiple times make a difference?
@drjimbob You are correct; I made the assumption that AES-CBC was being performed three times, and therefore the padding could be verified.
May
26
comment libraries alternative to gcc stack-protector / fortity source feature on linux
What requirements do you have that aren't satisfied by the built-in functionality?
May
24
comment How can the Google web crawler bypass portals?
Many sites have checks to see if the user-agent belongs to the Google crawler, and bypass certain access checks. It's always a good thing to check for if you're testing a site.
May
24
comment CSRF protection with custom headers (and without validating token)
@ChrisH. Future technologies and changes to his site might allow an attacker to add the header. If I remember correctly, HTML5's web sockets now allow this. Changes to his site might also introduce a HTTP response splitting bug, which may also bypass header checks. Regarding the XSS comment, I'm referencing the fact that if you have an XSS on page A, having a dynamic token creates a requirement for the attacker to read page B, which might block the request based on X-Requested-With, or be filtered via CSP.
May
24
comment Where does SSL encryption take place?
@begueradj As we've already discussed, TLS doesn't really fit anywhere in the OSI model. Strictly speaking, it's layer 7, not 5 or 6, but in terms of where you'd place it in terms of network protocol encapsulation it sits between TCP and the application, so 5 and 6 make sense. The distinction between 5 and 6 is also a grey area, because TLS does a lot more than just encrypt the data. So, as I've said before, this is an oversimplification and is only meant to express its position in the network stack in a practical sense.
Apr
26
comment Site is being redirected to Viagra store; all the usual suspects turn up nothing
I'm guessing there's a redirect in .htaccess
Apr
26
comment Site is being redirected to Viagra store; all the usual suspects turn up nothing
Did you check your .htaccess files? Since they start with a . you might miss them on an ls.
Apr
26
comment What can a hacker do with an IP address?
Sure, but again them having your IP isn't important. If they're angry enough to DDoS your home IP address with a huge botnet, then they're going to get to you somehow.
Apr
9
comment Do I need to worry about my SSH keys if my system was vulnerable to Heartbleed?
It's worth reading this: security.stackexchange.com/questions/55119/…
Mar
21
comment Alternative to security questions for account recovery when email isn't an option
That was the point of what I was saying.
Mar
17
comment Secure Communication Between .Net Application and Website
Fiddler shouldn't be able to MitM the connection unless you overrode the default .NET SSL certificate validation. If you did, then you threw away 90% of SSLs security anyway.
Mar
5
comment Bitlocker on a laptop without carrying around recovery key
TrueCrypt isn't a bad alternative. Or PGP FDE if you want a more enterprisey solution.