4,352 reputation
3735
bio website adranos.com
location
age
visits member for 1 year, 1 month
seen 12 hours ago
stats profile views 184


May
17
reviewed No Action Needed Trying to firewall ports 1863, 5190
May
17
reviewed Close Security concept
May
17
reviewed Leave Open Does escaping quotes protect me from SQL injection?
May
17
reviewed Leave Open Install Metasploit under Cygwin?
May
16
comment Truly deniable encryption
Yep that would probably do it. You have to make sure your access patterns are realistic (set all disks to noatime so file access time is not written to disk to make this easier, you can just say you are worried about disk lifetime).
May
15
comment Is it posible to make shellcode with C++?
This answer makes me want to go home and rethink my life.
May
15
reviewed Leave Open Tools to extract code comments from sites?
May
15
comment Tools to extract code comments from sites?
+1 this is what I would do. curl piped to sed.
May
15
reviewed Close Database connection from front end
May
15
reviewed Leave Open Bruteforce Passphrase of Dictionary Words
May
15
awarded  Nice Answer
May
15
revised Is it posible to make shellcode with C++?
added 448 characters in body
May
15
revised Is it posible to make shellcode with C++?
added 181 characters in body
May
15
answered Is it posible to make shellcode with C++?
May
15
comment Securing my firewall (both dedicated and iptables-based)
With iptables, the policy is the default action that a chain takes when no rules have been matched, so yeah it has the same effect as your final two rules. If port 22 is not forwarded to the outside world, then that is fine too. Given that iptables is behind the hardware firewall, I would say your logs will remain mostly empty.
May
14
answered Securing my firewall (both dedicated and iptables-based)
May
14
comment Bruteforce Passphrase of Dictionary Words
@DanKanze come join us in the DMZ
May
14
comment Bruteforce Passphrase of Dictionary Words
@DanKanze your use of the word 'throttling' is incorrect here. The point is that in order to test a candidate password, the attacker has to compute the hash for that candidate and compare it to the hash he is trying to crack. A good defender makes this computation process slow.
May
14
revised Bruteforce Passphrase of Dictionary Words
edited body
May
14
comment Bruteforce Passphrase of Dictionary Words
@DanKanze the fact that I list both 1000/second and 100 BILLION/second as possible attack rates should indicate to you that it really does depend on the situation. Trying to attack someone's Facebook account online is very slow, while trying to crack a poorly protected password hash is very fast.