4,465 reputation
2821
bio website
location
age
visits member for 3 years, 3 months
seen 1 hour ago

2h
reviewed Approve Help understanding basic user authentication with salts and hashing
Mar
22
awarded  Revival
Mar
10
reviewed Approve BitLocker Drive Encryption NOT secure from drive mapping on network
Feb
5
reviewed Approve PHP malware/shell keeps resurrecting
Jan
27
comment Problem in understanding Blakley's Secret Sharing Scheme
This might be better for crypto.stackexchange.com
Jan
19
comment What can my university see by installing a CA root certificate on my computer, even when I'm using a VPN?
It's strange to me that the cert they asked you to install was signed by Thawte. Thawte is usually a trusted CA in all browsers.
Jan
19
answered Is it possible to intercept traffic by using a WAN facing DHCP server on an ISPs cable network?
Dec
25
comment ARP: Forwarding or dropping with IPTABLES
You're mixing up your layers in this question. Ports are L4, packets and iptables are L3, ARP is L2. If the packet destination IP is the router, I don't know why it would hit the FORWARD table, I would think you would want the INPUT table here, but it's not clear exactly what you're trying to accomplish. Guessing at the problem: the router may be passing your L2 frame with the poisoned MAC up the stack to L3 and respond if it's running in monitor mode. With monitor mode disabled, it should drop the non-broadcast frame before sending it to L3.
Dec
21
reviewed Approve How can an online hack be traced back to the perpetrators?
Dec
17
reviewed Approve SQL injection — why isn't escape quotes safe anymore?
Dec
17
reviewed Approve Can webcams be turned on without the indicator light?
Dec
17
reviewed Approve How to determine what type of encoding/encryption has been used?
Dec
17
reviewed Approve How does Amazon bill me without the CVC / CVV / CVV2?
Dec
16
comment How do I release a self made program without it being tracked back to me?
Don't forget the problem of people identifying you through your writing style, or similarly your coding style or even the designs of your UIs. The code shouldn't look like anything you've ever written, or talked about. There are also identifiable traits in your post. Sentence starting with I've, hyphen missing a space for an en-dash, elipses at the end of a sentence, slashes as "or". "tube" is regional, the time of the post, etc. When you write your docs, they can't look like you wrote them. schneier.com/blog/archives/2011/08/identifying_peo_2.html
Dec
7
awarded  Yearling
Dec
6
reviewed Approve Is this PHP TOTP (time based one time password) idea sound?
Dec
5
reviewed Approve Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
Dec
4
reviewed Reject What to do about ssh breakin attempts
Dec
3
awarded  Popular Question
Nov
30
reviewed Approve php execution possibility in img src