49,323 reputation
14120210
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years, 1 month
seen 13 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Apr
26
comment Site is being redirected to Viagra store; all the usual suspects turn up nothing
I'm guessing there's a redirect in .htaccess
Apr
26
comment Site is being redirected to Viagra store; all the usual suspects turn up nothing
Did you check your .htaccess files? Since they start with a . you might miss them on an ls.
Apr
26
comment What can a hacker do with an IP address?
Sure, but again them having your IP isn't important. If they're angry enough to DDoS your home IP address with a huge botnet, then they're going to get to you somehow.
Apr
9
comment Do I need to worry about my SSH keys if my system was vulnerable to Heartbleed?
It's worth reading this: security.stackexchange.com/questions/55119/…
Mar
21
comment Alternative to security questions for account recovery when email isn't an option
That was the point of what I was saying.
Mar
17
comment Secure Communication Between .Net Application and Website
Fiddler shouldn't be able to MitM the connection unless you overrode the default .NET SSL certificate validation. If you did, then you threw away 90% of SSLs security anyway.
Mar
5
comment Bitlocker on a laptop without carrying around recovery key
TrueCrypt isn't a bad alternative. Or PGP FDE if you want a more enterprisey solution.
Mar
4
comment How do you protect strings in code from users decompiling them and seeing them
You can't. Change your security model so that you don't have to do this, e.g. get each user to input their own API key, or proxy the requests through a web service that handles the API interface itself.
Mar
4
comment Whole system ACK flood attack making internet slow
What's the question?
Mar
4
comment .NET provides 8+ ways to encode data to prevent XSS attacks. Which one should I use when?
It's worth looking at the OWASP ESAPI project, which contains a whole bunch of filtering utilities designed to help prevent XSS in output destined for HTML (inside tags, attributes, etc.), JavaScript, and CSS. Sadly the .NET version isn't quite up-to-speed yet, but it's still usable.
Mar
4
comment How to prevent DHCP Starvation attack?
The trick is to cycle MACs, so that you aren't using more than one at once, but get different leases.
Mar
4
comment How to prevent DHCP Starvation attack?
+1 on this. Often DHCP servers are reluctant to issue a new lease to a new MAC address when a DHCP release has just taken place. This is usually to help keep a device on the same IP if it just glitched out for a moment. By repeatedly cycling request/release across MACs your port only ever has one assigned MAC at any one point in time, but the IPs end up getting thrown into a temporary wait pool until they eventually dry up. It won't be 100% effective, but it'll probably mess the network up a bit.
Feb
18
comment How hard is it to read flash memory off a chip?
The BP comes with a set of female pins that connect to headers, but you can also buy alternative headers that has hook probes and tweezer clips. I use both. You can also clip various things into the standard headers anyway. It's mainly designed for easy integration into through-hole / breadboard stuff, as it primarily targets the hobbyist market. When I'm dealing with SMD stuff I usually use the tweezer clips (pincer style ones) to hook onto the leads.
Feb
18
comment How hard is it to read flash memory off a chip?
The BusPirate is a device which is designed to be a programmable interface with various bus types, with minimal implementation overhead. It is designed for interfacing with individual components without supporting circuitry. It and the Arduino do two completely different things. Also, the BusPirate is made by Dangerous Prototypes, not TI. If I had a big budget I'd probably still use a BusPirate, simply because it's so easy to use. I would probably buy a proper logic analyser to support it, though.
Feb
17
comment How hard is it to read flash memory off a chip?
@atdre It entirely depends on the flash chip. It could have an SPI or I2C interface, or something totally different. Then on top of that there'll be commands and steps that are unique to that device. It's impossible to give a catch-all. You have to read the datasheet and the BusPirate manual.
Feb
10
comment What could be the reason for the high traffic on the local network?
Could be malware, could be staff setting up BitTorrent seeds overnight on their systems. It's very difficult to tell. Where's the traffic going to? A few isolated IPs, or hundreds of different ones? Is it on a common port? Have you looked at the data being sent?
Feb
7
comment Bad practice to have a “god” password?
Why not just have an administrator account that has privileges to modify other users' data?
Feb
7
comment Weird condition in blind SQL injection point, substr() is valid for exactly two chars
Bizarre. Perhaps it's worth running SQLmap through a logging proxy to see what requests it's sending in order to exploit this?
Feb
5
comment How to store salt?
@matejkramny No. The primary issue is that users will ALWAYS re-use their passwords for other sites. You have a duty of care to protect any passwords given to you.
Feb
4
comment Are there any working proof-of-concept comparison timing attacks?
There are two core problems here: 1) JIT languages generally suck for demonstrating timing attacks; the overheads of JITing, object creation, boxing, GC, etc. swamp the execution time until the timing is almost meaningless 2) The operations you are doing don't have big enough discrepancies; a string compare of a few tens of characters is not a good choice for a demonstration. In fact, your assertion that the comparisons you chose should be faster or slower seems to be entirely wrong; abbbbb / bbbbbb should be fast, aaaaab / aaaaaa should be about the same.