2,884 reputation
318
bio website bonsaiviking.com
location
age
visits member for 2 years, 11 months
seen 4 hours ago

Mar
27
answered Why does WPA2 need a 4 way handshake?
Mar
27
revised Why does WPA2 need a 4 way handshake?
Add tags, clarify domain of the question.
Mar
10
answered proxychains-ng with nmap issues
Mar
6
answered SSLv3 HandShake but TLSv1 client hello
Mar
5
comment Is plain text over https really a good idea?
The advice to salt a password is like saying "Always sharpen your pocket knife before walking through bear territory." Too little, too late. You should be using a secure password storage mechanism. Even PHP got this right eventually, defaulting to bcrypt when you use password_hash and password_verify.
Mar
4
answered nmap not running as root shows unknown open ports for a fraction of a second
Mar
4
comment In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
@SiyuanRen The ciphersuite is changed back to what the client expects. The bug is that the client will accept export-grade keys even when the ciphersuite should be using longer keys. Edited my answer to clarify.
Mar
4
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
Clarify attacker's modifications to server traffic
Mar
4
awarded  Explainer
Mar
4
answered In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
Mar
4
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
Put the question in the title
Feb
28
answered What's to stop someone from just MITMing a checksum?
Feb
24
answered nmap says “variable 'keys' is not declared” when trying to run ssl-ccs-injection.nse
Feb
23
comment Why would a stealth scan attract more attention than a connect scan?
Historical note: "stealth" refers to application logs, which will not show these connection attempts since the connection is aborted before the kernel hands it off to userland.
Feb
11
comment What makes twitter different than other sites regarding users anonymity
This question seems to be a "constructive subjective" question, not simply opinion-based. It may not have a hard-and-fast answer, but the answers are not based on opinion but rather on facts surrounding the various structures that social networks use for identity and privacy.
Feb
10
revised What makes twitter different than other sites regarding users anonymity
Also address Reddit and Twitter API search
Feb
10
awarded  Nice Answer
Feb
10
answered What makes twitter different than other sites regarding users anonymity
Feb
6
answered Does TLS fallback only keep from downgrades to SSLv3?
Feb
3
comment What is the fastest way to scan all ports of a single machine
@Dogeatcatworld But it will likely rate-limit those responses to 1 per second, so Nmap will slow down accordingly in order to catch them all. This is the major source of UDP slowness in Nmap vs asynchronous scanner that doesn't care about closed ports.