Reputation
920
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 11
Impact
~21k people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Aug
6
comment How can I verifiably demonstrate that steganography or hidden partitions do not exist?
Setting all unused data to '0' does not demonstrate that a hidden partition does not exist. With TrueCrypt the partition will seem to hold perfectly random data. With truly random data any outcome is equally possible including all zeros (or all ones, or all digits of pi). It will be extremely unlikely but not impossible.
Aug
2
comment Is it unsafe to keep multiple versions of a KeePass database?
@DominykasMostauskis what version are you using? My version 2.29 keeps a history of every single edit I make. You are probably using the Classic version? When you switch to the professional version (just as free) you get the full history.
Aug
2
comment Is it unsafe to keep multiple versions of a KeePass database?
You do realize KeePass keeps a history of your old passwords inside the database as well? For that purpose there is no need to keep multiple version of the database.
Jun
30
answered Malware: extract private keys from smartcard?
Jun
1
comment Phone calls that listen to you saying hello and then say “goodbye”
If that were true they should at the very least say something more tempting like 'I am calling to tell you that your order is ready to be picked up'. That would make 10 times as many people call back.
May
6
comment Is it possible to bypass HTML character reference encoding to inject SQL in this context?
@Mico, how can you tell that replacement is happening at the serverside? Do you have access to the server?
Mar
30
comment Why don't popular web services mask the CVV?
@Gray actually "why doesn't google do it" has probably a factual answer (but we do not know it) and "should we be masking CVVs?" is opinion based.
Mar
22
comment Why is the truncate function for HMAC one time passwords so complicated?
Duplicate of crypto.stackexchange.com/questions/5249/…
Mar
3
awarded  Popular Question
Feb
21
answered How to be sure laptop's trusted certificates are safe
Jan
29
awarded  Yearling
Jan
10
answered RC4 support in SSL configuration
Nov
23
comment Access token vs. UserID + access token
When you do so you have effectively introduced an userID. You just happen to store it as the last 6 bytes of your expanded token.
Nov
23
answered Access token vs. UserID + access token
Oct
2
awarded  Good Question
Sep
20
awarded  Notable Question
Aug
24
comment someone is trying to SQL injection me.. what are they trying to do?
char(38,126,33) is just a way to write &~! without using quotes. The SQL select three innocent but uncommon characters from the database. The exploiter will watch if those three characters end up in the resulting HTML page and know there is a vulnerability.
Aug
24
comment someone is trying to SQL injection me.. what are they trying to do?
Funny, when you search Google for char(38,126,33) you will find many more attempts. I think in itself this attempt is harmless, it is only used to test whether a SQL injection is possible. Only if it is, more exploit attempts will follow.
Mar
8
answered How is a “commonly used password” determined?
Feb
10
awarded  Popular Question