1,070 reputation
821
bio website
location
age
visits member for 2 years, 3 months
seen Apr 16 at 3:27

Feb
17
comment Hiding JavaScript source code
There's little reason to even attempt to hide the code used for basic web page use. The primary reason people obfuscate code is because they don't want others to be able to copy that code. By obfuscating the code, they make it harder (not impossible, and not very hard) for somebody to copy their code and use it on their own site. It's not a security thing.
Feb
17
comment Is there a difference between GET and POST for web application security?
@HendrikBrummermann I think they are considerably more difficult to execute in many cases. I can make you submit a GET request wherever I want with an <img> tag on any page you load. Lots of sites let you embed images from external hosts, including this one, meaning I don't even have to convince you to go to my website. Not so many let you embed arbitrary JavaScript.
Jan
31
comment How do you get a specific .onion address for your hidden service?
These names are generated in almost the same way that novelty tripcodes are generated on image boards like 4chan.
Jan
28
accepted What are darknets, and how can they be used to provide security and anonymity in network communication?
Jan
26
comment Is an ATM alert system triggered by typing the PIN in reverse a secure solution?
"I never use the duress PIN so I forgot it." Most ATM robbers aren't going to shoot somebody because they forgot their PIN, especially if they've provided at least one PIN.
Jan
26
comment Should sensitive data ever be passed in the query string?
agreed, just wanted to throw that out there for anybody else reading.
Jan
25
comment How to find a reliable private mail drop or ghost address provider? (Not CMRA)
I might have misunderstood the OP, but I think s/he was asking about physical mail (not email). In other words, he wants to give a proxy address every time he orders something online, and have all packages/mail sent to that proxy address forwarded to his real address (which only the proxy service knows).
Jan
25
comment Should sensitive data ever be passed in the query string?
Re: the SO question you linked to: yes, the URL is encrypted, but a man-in-the-middle can often still tell what website you are visiting based on the IP (and other metrics, such as amount of data transferred). If you have SNI enabled (your browser probably does), the domain is actually sent in plain text before upgrading to SSL.
Jan
25
awarded  Nice Question
Jan
25
awarded  Nice Answer
Jan
21
comment Is suspicious network activity likely to be caused by a rootkit?
Alternatively, if you can flash your router with DD-WRT (or similar), you can SSH in and monitor your network with tcpdump.
Jan
21
comment Is TLS secure when full eavesdropping on the network occurs?
@Brett see the question Giles linked.
Jan
21
comment Can my ISP know my passwords
I should add that if you don't trust your government, you probably shouldn't trust the PKI (your government probably runs a root CA or can compel a root CA to sign a fake cert).
Jan
20
awarded  Self-Learner
Jan
20
comment Privacy in torrents?
Not only is torrenting over Tor impractical in the first place, but many Tor exit nodes use traffic shaping to block BitTorrent traffic. The Tor model isn't suited to high bandwidth traffic.
Jan
20
comment Backup TrueCrypt hidden volume
This is the best way. The other solutions proposed would have you encrypt the data some other way, which potentially compromises its security (I would prefer to have my data encrypted only in one way; having it encrypted multiple ways gives my adversaries several different targets to pick from). 16 GB of data will not take a long time to copy unless you are using very old technology. I regularly backup 2 TB of encrypted data using dd.
Jan
20
answered Can my ISP know my passwords
Jan
20
comment Law & Ethics - I'm not be breaking the law its the computer
What did your lawyer say? None of us can provide you with good legal advice; we're mostly technology people.
Jan
20
comment Building my own Darkspace
Thanks for the help. I started a new question and tried to expand my answer. You can see it here. Please feel free to provide feedback or edit it directly. I haven't really posted a big write-up like this before. Thanks!
Jan
20
comment What are darknets, and how can they be used to provide security and anonymity in network communication?
I'm done with making changes this answer for tonight, so please feel free to edit it; I'll take another look at it tomorrow in case I missed anything. I've tried to change it to be more general while still providing comments based on my first-hand experience participating in darknets. Hope this helps someone!