1,418 reputation
611
bio website colibrifrost.com
location
age
visits member for 2 years, 6 months
seen 5 hours ago

I enjoy writing a programming and security focused blog complete with code snippets.

I try and exemplify very useful and tricky pieces of code, explain different security concepts and review some of my favorite books.

I learned a lot from open source projects so I try and publish my more exciting and useful programs on GitHub.

All in the name of fun and education.


Sep
10
comment How to keep someone from analyzing our site?
@Peteris Its about increasing the level of effort. If this is a "script kiddie" does he really feel like hopping on tor or using a vpn? Maybe maybe not. Blocking an ip is not necessarily difficult. If he continues you've at least profiled the threat and have more information now than you did before.
Sep
10
answered How do I know that my connection is really encrypted?
Sep
10
comment How to keep someone from analyzing our site?
Block the IP for a couple of weeks? The attacker will possibly loose interest and move on to the next site.
Aug
26
asked Default logging systems/directories for security monitoring
Aug
20
answered Sandbox environment for “php malware” analysis
Aug
20
comment How to protect source code locally when traveling with it
@MatthewPeters a full source code review is moving forward and the project has been picked up. I wouldn't call that dead.
Aug
20
answered How to protect source code locally when traveling with it
Jul
6
answered (Android) hacking server by a simple socket
Jul
6
comment (Android) hacking server by a simple socket
If the question is concerned about RE to begin with i would say any stored secrets on the client would be less than optimal. Although you are right in that this will increase the effort and may discourage some bad users
Jul
3
comment (Android) hacking server by a simple socket
In this case the secret is stored on the client correct?
Jul
2
answered Checking if apk's contain malicious software
Jun
11
answered Storing SSH private keys on an Android device
Mar
20
awarded  Yearling
Dec
25
comment How to learn programming from a hacker's prospective
Consider looking into the book violent python.
Dec
20
awarded  Informed
Dec
16
answered What are the major vulns that affect the Dalvik VM of Android?
Dec
8
awarded  Enthusiast
Nov
13
comment Forensic analysis of Android sqlite db's
Are you sure that none of the needed information is stored in memory? I wouldn't expect everything to be in the local db. One thing that might make this easier is if you have a rooted phone to just download a sqlite browser/editor and you can edit/view the fields directly
Nov
13
answered Are there any web application security standards?
Sep
27
answered Google Calendar has events that I didn't create and it's not shared