511 reputation
310
bio website rushyo.com
location United Kingdom
age 27
visits member for 3 years, 10 months
seen Oct 31 at 11:58

Mar
20
comment How would one crack a weak but unknown encryption protocol?
@TerryChia A principle can be applied successfully 100% of the time and still doesn't become a fact. A fact isn't actionable, like a principle is. You can enact a principle by following it, you can't enact a fact. You don't say "We need to apply the laws of gravity for this". You do say "We need to apply Kerckhoff's principle for this". Someone can choose to ignore Kerckhoff's principle (at their peril). They can't choose to ignore the laws of gravity.
Mar
20
comment How would one crack a weak but unknown encryption protocol?
@SmitJohnth For it to be a rule it would need an obligation. You can apply a rule to a principle (i.e. everyone must follows Kerckhoff's principle to work on this library) but that doesn't make the principle itself a rule.
Mar
18
comment How would one crack a weak but unknown encryption protocol?
It's a principle. It's meant to guide decision making. It's not a law, rule or theory that is actually fact.
Mar
18
comment How would one crack a weak but unknown encryption protocol?
Worse than nothing because it breeds a false sense of security. At least if you don't have a control in place you continue to rationalise future security decisions on that assumption, rather than relying upon the assumption that you have a control in place that is better than it really is.
Mar
4
comment Automatic robot crawler to check web pages authenticity?
+1 for Tripwire, although it's worth noting that managing a Tripwire instance can easily consume a lot of your time.
Mar
4
comment How dangerous is game guard?
@ruief Not meaning to sound snippy but if that were true then we might as well get rid of UAC, SU, ACLs, User Groups...
Feb
28
comment I managed to capture a botnet control host, what do I do with it?
@Shadur If you really think the data you can collect is that valuable (I suspect it's not) then then you may wish to try something like Volatility to record the current forensic state of your RAM at least. The trouble is that if you screw it up you can end up doing more harm than good.
Feb
28
comment I managed to capture a botnet control host, what do I do with it?
@MasonWheeler That would probably be govcert.nl in this instance.
Feb
28
comment How to Secure My DropBox Installation?
Quite. This is ideological fluff, not an appropriate answer to the question.
Feb
28
comment Using ModSecurity as transparent mode
It's not clear to me what you're asking. ModSecurity is a server-side technology. It doesn't sit between your server and client.
Feb
28
comment I managed to capture a botnet control host, what do I do with it?
Given he said 'my webhosting customers' I think it's fair to assume he doesn't have a SIRT/CERT team backing him up.
Feb
28
comment Is it safe to install metasploit in my daily-used computer
Unless you're running on a laptop from ancient times, you shouldn't have any trouble running one of the smaller *nix distros. You don't need to feed a dedicated Metasploit VM with RAM and processing power like you would a general-purpose Windows VM.
Jan
28
comment default.php file found on the server, is this a security threat?
Kind of the RAT to handle file locking nicely...
Aug
17
comment AMD64 overflows and null bytes
Just ran into this myself. Surely somebody has a solution for this? Googling comes up blank except for this question.
Aug
25
comment If someone breaks encryption, how do they know they're successful?
"If someone breaks encryption, how do they know they're successful?" "They don't." There, question answered. The TrueCrypt reference just added some flavour and context. The methodology of that and how it affects any particular method of breaking any encryption is irrelevant /mute
Aug
24
comment If someone breaks encryption, how do they know they're successful?
...and I never mentioned anything about double encryption. You're arguing a straw man.
Aug
24
comment If someone breaks encryption, how do they know they're successful?
Which does not, in any way, affect anything I wrote? The fact is you don't know what the encrypted data is supposed to look like, so it's impossible to know what it's supposed to look like. Hidden volumes are a practical case of that concept being applied.
Jan
19
comment What particular concerns should one bear in mind when wardriving?
e) It also provides no community education. If you tell people about problem X and how to address it, they don't learn anything. The experiences and lessons aren't passed on. f) Because there's no social element there's no impetus to behave differently in future issues. When people get AV warnings they don't change their browsing habits, they just act worse because their AV caught something.
Jan
19
comment What particular concerns should one bear in mind when wardriving?
a) For the aforementioned reasons. b) You're not THEIR service provider. You're A service provider. There's no trust. c) I think you've misread 'anonymous'. The data is anonymous, not the person handing it over. As in: Charts, graphs. Not raw data. d) "it rarely if ever is" Disagree entirely. Responsible disclosure creates the best outcomes for community security problems. See Apache, Firefox, GNU et al.
Jan
17
comment Disable insecure/dangerous PHP functions
"Secondly, where did you get something like "inject_code"? What's that?" Function in a certain app used as part of a vulnerability... see CVE-2009-1911. My solution would be to get rid of the program but hey...