511 reputation
310
bio website rushyo.com
location United Kingdom
age 27
visits member for 3 years, 10 months
seen Oct 31 at 11:58

Feb
24
awarded  Editor
Feb
24
revised SMTP and SSL/TLS
Typo
Feb
24
answered SMTP and SSL/TLS
Feb
24
awarded  Commentator
Jan
28
comment default.php file found on the server, is this a security threat?
Kind of the RAT to handle file locking nicely...
Aug
21
awarded  Caucus
Aug
17
comment AMD64 overflows and null bytes
Just ran into this myself. Surely somebody has a solution for this? Googling comes up blank except for this question.
Aug
25
comment If someone breaks encryption, how do they know they're successful?
"If someone breaks encryption, how do they know they're successful?" "They don't." There, question answered. The TrueCrypt reference just added some flavour and context. The methodology of that and how it affects any particular method of breaking any encryption is irrelevant /mute
Aug
24
comment If someone breaks encryption, how do they know they're successful?
...and I never mentioned anything about double encryption. You're arguing a straw man.
Aug
24
answered Best password strength checker
Aug
24
comment If someone breaks encryption, how do they know they're successful?
Which does not, in any way, affect anything I wrote? The fact is you don't know what the encrypted data is supposed to look like, so it's impossible to know what it's supposed to look like. Hidden volumes are a practical case of that concept being applied.
Jan
19
comment What particular concerns should one bear in mind when wardriving?
e) It also provides no community education. If you tell people about problem X and how to address it, they don't learn anything. The experiences and lessons aren't passed on. f) Because there's no social element there's no impetus to behave differently in future issues. When people get AV warnings they don't change their browsing habits, they just act worse because their AV caught something.
Jan
19
comment What particular concerns should one bear in mind when wardriving?
a) For the aforementioned reasons. b) You're not THEIR service provider. You're A service provider. There's no trust. c) I think you've misread 'anonymous'. The data is anonymous, not the person handing it over. As in: Charts, graphs. Not raw data. d) "it rarely if ever is" Disagree entirely. Responsible disclosure creates the best outcomes for community security problems. See Apache, Firefox, GNU et al.
Jan
18
answered If someone breaks encryption, how do they know they're successful?
Jan
17
awarded  Teacher
Jan
17
answered What particular concerns should one bear in mind when wardriving?
Jan
17
comment Disable insecure/dangerous PHP functions
"Secondly, where did you get something like "inject_code"? What's that?" Function in a certain app used as part of a vulnerability... see CVE-2009-1911. My solution would be to get rid of the program but hey...
Jan
5
awarded  Supporter
Jan
5
comment What is the risk of a packet being sniffed when travelling over the internet without SSL/TLS?
Firesheep in your local coffee shop springs to mind...
Jan
5
awarded  Autobiographer