688 reputation
412
bio website
location
age
visits member for 2 years, 9 months
seen May 19 '13 at 13:33

Dec
11
comment Trust linux images burned from untrusted systems
@DeerHunter This way I would still have to verify the image on another system since his system could have altered the image.
Dec
11
comment Trust linux images burned from untrusted systems
@lynks if I use sha256sum to calculate the checksum of the iso I didn't verify this was really burned to the cd. Somebody could manipulate the program I'm using to burn the image and backdoor it on the fly.
Dec
3
comment What is the most hardened set of options for GCC compiling C/C++?
@Rook He's using -Werror, so the warnings become errors. He can't compile it, unless he's fixing the source.
Oct
7
comment What happens when and attacker changes the installed public keys in browser
You can't trust a compromised system. There isn't really anything more to say.
Jul
28
comment How can I do a secure reinstallation on an android device?
1. Yes. 2. GT-I9100, but I think it would be better to keep this topic more generic. I hope this question is relevant for other users, too. 3. No. It's just for paranoia's sake.
Jul
19
comment Conky for PenTesters
it's your own box, so they can only detect it by the network traffic. Your command puts the interface into promisc mode, but you can disable this behavior. But even if you don't, they have to send packets to detect it. And you should have a firewall to prevent this detection anyway.
Jul
19
comment Conky for PenTesters
Why should it be noisy to run a sniff on your own box?
Jul
17
comment How can I do a secure reinstallation on an android device?
@Tie-fighter CyanogenMod-7 and Samsung Galaxy S2
Jul
13
comment What torrent software should I be aware of as a security professional?
@AndrewSmith you are implying torrents are illegal; They aren't. Piracy would be illegal, but not torrents.
May
18
comment Is there any chance PHP developers themselves implement backdoors in PHP core?
Well.. What do you suggest? a) Trust it (blindly) b) Audit it c) Don't use it. You don't have any other options.
May
16
comment Testing a chroot environment for privilege escalation vulnerabilities
/dev/tcp and /dev/udp arn't real devices. The don't exist in my system but I can use them anyway in bash. It's a feature the bash developers built in.