48,493 reputation
12118208
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years
seen 20 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Feb
18
comment How hard is it to read flash memory off a chip?
The BusPirate is a device which is designed to be a programmable interface with various bus types, with minimal implementation overhead. It is designed for interfacing with individual components without supporting circuitry. It and the Arduino do two completely different things. Also, the BusPirate is made by Dangerous Prototypes, not TI. If I had a big budget I'd probably still use a BusPirate, simply because it's so easy to use. I would probably buy a proper logic analyser to support it, though.
Feb
17
comment How hard is it to read flash memory off a chip?
@atdre It entirely depends on the flash chip. It could have an SPI or I2C interface, or something totally different. Then on top of that there'll be commands and steps that are unique to that device. It's impossible to give a catch-all. You have to read the datasheet and the BusPirate manual.
Feb
10
comment What could be the reason for the high traffic on the local network?
Could be malware, could be staff setting up BitTorrent seeds overnight on their systems. It's very difficult to tell. Where's the traffic going to? A few isolated IPs, or hundreds of different ones? Is it on a common port? Have you looked at the data being sent?
Feb
7
comment Bad practice to have a “god” password?
Why not just have an administrator account that has privileges to modify other users' data?
Feb
7
comment Weird condition in blind SQL injection point, substr() is valid for exactly two chars
Bizarre. Perhaps it's worth running SQLmap through a logging proxy to see what requests it's sending in order to exploit this?
Feb
5
comment How to store salt?
@matejkramny No. The primary issue is that users will ALWAYS re-use their passwords for other sites. You have a duty of care to protect any passwords given to you.
Feb
4
comment Are there any working proof-of-concept comparison timing attacks?
There are two core problems here: 1) JIT languages generally suck for demonstrating timing attacks; the overheads of JITing, object creation, boxing, GC, etc. swamp the execution time until the timing is almost meaningless 2) The operations you are doing don't have big enough discrepancies; a string compare of a few tens of characters is not a good choice for a demonstration. In fact, your assertion that the comparisons you chose should be faster or slower seems to be entirely wrong; abbbbb / bbbbbb should be fast, aaaaab / aaaaaa should be about the same.
Feb
3
comment How do we know if the hard disk we just bought is “clean”?
My advice still holds. You are screwed if that is the case.
Jan
31
comment How do we know if the hard disk we just bought is “clean”?
If they can influence a sensitive manufacturing process with hundreds if not thousands of people involved, and tens of thousands of affected customers world wide, then you're even more screwed.
Jan
31
comment How do we know if the hard disk we just bought is “clean”?
Exactly my point. You can't ever 100% verify the security of anything. Trying to do so is an exercise in futility. Like it or not, you have to rely upon implicit social constructs like trust and faith. There's nothing to stop the guy at Starbucks from filling your morning coffee with cyanide, but we have faith in the fact that he is deterred by the consequences, and faith that the judicial system would rightly prosecute him if he did poison you. Conversely, he trusts that you won't try to steal his cash register or throw your piping hot Grande Macchiato in his face after he serves you.
Jan
31
comment How do we know if the hard disk we just bought is “clean”?
If your adversary can modify your hard disk's firmware or hardware between the time that you order it from Amazon and the time that you plug it into your system, I suggest quitting your job, taking out a large loan, and flying out to somewhere sunny like the Bahamas, because you'll be glad that your last few days on earth were comfortable.
Jan
31
comment How do we know if the hard disk we just bought is “clean”?
No link to mainstream malware, but that's a moot point - you should protect against unknown and future threats. It's possible, though. Give this a read: spritesmods.com/?art=hddhack&page=1
Jan
31
comment How do we know if the hard disk we just bought is “clean”?
That still doesn't cover other attacks, like firmware modification.
Jan
31
comment How do we know if the hard disk we just bought is “clean”?
You can't assume that the boot sector will be clean, and if you're using the drive for data rather than an OS then the boot sector probably won't get replaced. Then all it takes is for your BIOS to attempt to boot from it.
Jan
31
comment RSA vs ECDSA for VANET Security
Does the downvoter feel like gracing us with a comment, are are they just intent on being an unhelpful asshat?
Jan
31
comment How to Protect JSON Data
Protect it from who? The user? People sniffing the network? Protect it against what type of attacks? How, specifically, is the JSON being used in the application?
Jan
25
comment Is there a way to split up my SSH Key using Shamir's Secret Sharing?
Excellent, thanks. I figured Lagrange polynomials might be involved in some way, though I didn't expect it to be so direct.
Jan
24
comment Bank cards - chips vs mag stripe security
RFID is about contactless payments. Chip & Pin is a different technology.
Jan
24
comment Is there a way to split up my SSH Key using Shamir's Secret Sharing?
Slight side question (sorry for hijacking this a little) - is this similar to the concept of Lagrange polynomials, whereby given n-1 points on the curve (where n is the number of terms in the polynomial) you can calculate another target point?
Jan
23
comment How does IP Spoofing increase the upload speed?
DNS, NTP, SNMP, etc. are all potential vectors for amplification.