43,557 reputation
1294172
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 6 months
seen 15 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Oct
16
comment Memory Protection Unit/MMU in context of multiple cores and security issues
So, to be clear, you're worried about a threat model where an attacker that has gained kernel code execution? At that point is there really a question as to whether they've owned the device? Or are you more worried about them overwriting baseband firmware that exists outside of the kernel?
Oct
16
comment Expose web service in a secure manner
... why is your DMZ public facing? That kinda negates the idea of it being a DMZ.
Oct
16
comment Does this show the need for a two-factor authentication?
Agreed - 2FA will not help you in WEP. It's horribly broken. Switch to WPA2 if you want any semblance of wireless security.
Sep
23
comment accepted naming convention for public keys/certificates
Just a quick note - you may have accepted my answer, but please read Tom Leek's answer too. It's much more comprehensive and he's an actual cryptographer, so this kind of question is right in his ballpark.
Sep
23
comment Using multiple keyfiles in truecrypt
@SalvadorDali Entropy bits per character is log2(n) where n is the size of the character pool, so for 26 (a-z) that's 4.7 bits per character. 4.7 bits per character * 20 characters = 94 bits of entropy.
Sep
23
comment Is it possible to detect host-machine of my virtual-machines?
What operating system(s) are you running on your host / guest? These are important, as there are differences in the network stack capabilities - for example, Windows won't let you monitor loopback interfaces.
Sep
23
comment Is running a Windows service as a (standard) user a risk?
Local System is the same as SYSTEM, which is analogous to root in the Linux world - compromise SYSTEM and you've compromised everything. Other service accounts, e.g. Network Service, have some security benefits (e.g. segregation of access across same-user processes) but are still high-privilege accounts. Using a dedicated user ensures maximum separation and allows for more narrow assignment of minimum necessary privileges, but is obviously more difficult to implement and has more potential pitfalls.
Sep
23
comment How to “normalize” an html file?
I highly recommend looking into Content Security Policy as a defense in depth approach to solving XSS issues.
Sep
17
comment Is it OK to generate a token for a credit card without the user's permission? Is that PCI compliant?
What kind of token? What is the token used for? How is the token stored?
Sep
17
comment Create a unterminable process in Windows
@mihi Yes, that is true, but I'm pretty sure that in this case the "debug a debugger" part requires admin.
Sep
16
comment Create a unterminable process in Windows
@mihi Yes, #8 requires admin, since debugging is a privileged operation. I mentioned the process chaining trick in the final paragraph of #3.
Sep
11
comment How could `iptables -F` lock me out of the server?
This isn't a security question, so I've VtC'ed it as off topic. A mod will shift it over to SuperUser if it is deemed appropriate.
Sep
11
comment What can a web application developer do to protect user information from powerful adversaries like the NSA or China
Google reckons they confirmed the quantum part of theirs, but for the amount of money they spent on the device it'd be pretty easy to just build a really fast traditional computer and masquerade it was quantum.
Sep
11
comment Which cloud providers can be used for the simulation of DDoS attacks?
VtC'ed this, as it's asking for product recommendations, which are explicitly off-topic here.
Sep
11
comment How To Track Down Who Initiated A Remote File Transfer Via TeamViewer If I Have Log File
Do not attempt to do your own forensic investigation. Report it to the authorities immediately.
Sep
11
comment RdRand from /dev/random
@cen Maybe. You'd have to implement the RNG in the exact same way and verify the pool at runtime (difficult if the CPU is watching you!). However, it could be that there are countermeasures against this, or that it only poisons the pool in a very surreptitious way that the NSA can use in conjunction with other cryptographic attacks.
Sep
10
comment RdRand from /dev/random
@ott-- Not necessarily. The CPU is a very complex state machine, so it can be designed to react to a particular pattern of instructions in an unexpected way. Would explain why Linus is so fervently rejecting modifications to it.
Sep
10
comment Does it make sense to choose a longer password than the output of a hash?
Damnit. Every time I post a half-reasonable answer to a crypto question, you come along and blow it out of the water. Excellent work, sir. You git.
Sep
10
comment Does it make sense to choose a longer password than the output of a hash?
m is the message you're hashing, and M is the set of all possible messages for a specified length.
Sep
10
comment Is there any point in using 'strong' passwords?
I think the most important point to make is that it should be unique, so that even if the password is compromised, it only compromises that single account.