Reputation
411
Top tag
Next privilege 500 Rep.
Access review queues
Badges
4 18
Newest
 Caucus
Impact
~17k people reached

Jul
28
awarded  Caucus
Jun
20
awarded  Notable Question
Mar
31
awarded  Notable Question
Jan
26
awarded  Popular Question
Jan
21
awarded  Yearling
Jan
12
comment The Creation of Secure Software Development Environments
You might want to look also to The Building Security In Maturity Model - bsimm.com
Dec
9
comment how can I authenticate a process from kernel side?
I will not use a PID to flag the auth status since PIDs are limited in space and they are used circularly and so potentially the PID can be spoofed.
Dec
4
asked how can I authenticate a process from kernel side?
Nov
5
accepted USB OTG DMA Attack vector, any information about that?
Nov
5
comment USB OTG DMA Attack vector, any information about that?
Ok thank you. Maynor replied to some of my enquiries and he told me nothing basically. I know that USB specification are public but I can't allocate the necessary effort on the spec. I trust your explanation. Thank you.
Nov
5
comment USB OTG DMA Attack vector, any information about that?
Do you know that because you know how USB works under the hood or what ?
Nov
4
comment USB OTG DMA Attack vector, any information about that?
Unfortunately I don't know how USB OTG works. My understanding is that with USB OTG and USB protocol exploitation you can have access to DMA. I contacted Maynor on Twitter but he didn't reply yet. In summary by the way, seems that in the paper are used wrongs and not so clear assumption.
Nov
3
asked USB OTG DMA Attack vector, any information about that?
Oct
28
awarded  Popular Question
Oct
24
awarded  Popular Question
Oct
23
revised What is different about being targeted by a professional attacker?
added 6 characters in body
Oct
20
revised What is different about being targeted by a professional attacker?
added 269 characters in body
Oct
20
answered What is different about being targeted by a professional attacker?
Oct
15
comment Which key usages are required by each key exchange method?
With Openssl tls v1.2 if you don't use keyAgreement in KeyUsage field you are not allowed to establish ECDH but only ECDHE. I think the OP would to know things like that.
Sep
29
comment What are the difference between WPA2-PSK and WPA2-EAP-PSK?
Does EAP-PSK has one password for all clients or one password for client ?