5,955 reputation
41139
bio website adranos.com
location
age
visits member for 2 years, 4 months
seen Feb 13 at 14:40

@TildalWave said having a sig would encourage more people to view my profile. Also beer.


Nov
19
comment Is a password protected PDF file safe for bank statement attachments?
50 characters!? As a benchmark, 14 characters ~100 bits maximum entropy, which is more than enough if the PDF encryption is configured correctly.
Nov
8
comment Are older viruses removed from virus definition files?
You know I know that :P entry point of 0x00 and 0xaa55 at bytes 510 and 511. The rest is easy :)
Nov
6
comment Are older viruses removed from virus definition files?
What if I write my 16-bit PE malware to your MBR? :P
Nov
6
comment Preventing DDoS from faked IP address
The 'syn flood' described by GZBK here works because your server has to keep a record of all unfinished TCP handshakes for a period of time. Sending a whole bunch of SYN packets fills up this record. SYN Cookies is a method of selecting special TCP sequence numbers in such a way that allows the server to not keep a record of unfinished TCP handshakes. See the wikipedia article for details.
Nov
5
comment Preventing DDoS from faked IP address
The answer in reality is that DDoS mitigation is extremely difficult, and any solution will only be of partial success. Companies exist solely to absorb huge DDoS attacks.
Nov
5
comment Preventing DDoS from faked IP address
Read this answer, particularly the things regarding Proof of Work.
Oct
28
comment What does Mark Shuttleworth mean by “we have root”?
@MSalters My favourite thing about that is that all the short unix commands were implemented to avoid having to regularly swap out ink ribbons on the teletypes :) they're quicker to type too of course.
Oct
28
comment scrypt strength with “weak” salt
@JohnC if you want to make it more expensive, you increase the work factor. Salts are about preventing precomputation attacks, not increasing the cost of brute forcing an individual hash.
Oct
28
comment scrypt strength with “weak” salt
Doesn't scrypt bundle the salt and hash together anyway? Even if not, what is stopping you from storing a tuple?
Oct
11
comment Does google use browser fingerprinting?
Your browser fingerprint appears to be unique among the 3,475,427 tested so far. oh dear.
Oct
11
comment Is it possible to brute force all 8 character passwords in an offline attack?
For single iteration MD5, small GPU arrays (<20 cards) are now pushing into the 100Billion/second area. Large (intelligence agency) arrays will be several orders of magnitude faster.
Oct
9
comment Totally secure public key distrubition
If I want to set up a PGP link with someone I know, I will ask them to send their public key, and then I will call them and read it out over the phone to confirm it is correct. Voices are pretty hard to synthesize in real time :P
Oct
3
comment What would one need to do in order to hijack a satellite?
+1 Purely for the Mel story
Sep
20
comment Encryption - which are/aren't NSA backdoored
None of them, the NSA already controls your CPU's microcode, they wrote your compiler and the firmware in your network card. The only way to escape them is to add another layer to your tinfoil hat. In all seriousness though, all of that is possible, which makes your question moot.
Sep
19
comment Why doesn't Linux randomize the address of the executable code segment?
Ahh I understand. I suppose the Windows method has a performance benefit, if they do indeed modify calls et.al. in the code itself. Thanks again.
Sep
19
comment Why doesn't Linux randomize the address of the executable code segment?
Since sharing is on a per-page basis, this means that dynamically altering the call argument (the few bytes after the call opcode) should be avoided. I don't quite follow what point you're making here bearface.
Sep
19
comment Create netcat listener and execute reverse shell in the same script
@Nucklear If you're really sure you want to put it all into one Python file, you're probably going to have to fire off a listening thread. The other option would be to wrap it in a bash script and use either the background (&) function, or named pipes, or something.
Sep
19
comment Create netcat listener and execute reverse shell in the same script
@Nucklear your upstream socket should be connecting to the vulnerable service straight away. If it is timing out, then something is wrong at the remote end.
Sep
18
comment Create netcat listener and execute reverse shell in the same script
@Nucklear It should only block when you reach the s.accept() call. None of the calls above should block. The order needs to be 1)Bind_&_Listen 2)Send_Exploit 3)Accept_Connection
Sep
18
comment Create netcat listener and execute reverse shell in the same script
@Nucklear I have added to my answer to address how to do this in python alone.