54,853 reputation
388230
bio website
location
age
visits member for 3 years, 6 months
seen 4 hours ago

4h
awarded  Announcer
4h
comment PDF.zip file password forgotten and need to reset
True. security.stackexchange.com/q/5447/971 might be relevant if it isn't encrypted with AES. If their question is not covered by either of those two links, the author can post a new question (or edit this one) with the details of their specific zip file. In particular, they should tell us what it was encrypted with, if it wasn't AES and wasn't the weak "standard" encryption.
1d
awarded  Nice Question
2d
awarded  Good Answer
Jul
25
comment How to generate a superkey to decrypt strings
The search term to use is key escrow or master-key cryptography. There's been lots of work on this. (See also identity-based encryption.)
Jul
24
revised How is Google Chrome managing authentication to sites?
Asking about switching to Firefox/Chrome is off-topic and in any case doesn't belong in this question.
Jul
24
comment How is Google Chrome managing authentication to sites?
1. Why do you think it is "inherently very very secure"? What threats/risks are you worried about? What is your threat model? I suspect you are making judgements that might not have a strong basis in the actual risks, or that aren't a significant issue for most users. 2. The last paragraph about Mozilla/Firefox is probably off-topic on this site (too broad, too dependent on opinion) and in any case does not belong in this question.
Jul
23
awarded  Informed
Jul
23
comment How do websites tracker cookies and beacon work?
What research have you done? There is a lot written on this subject, and I'm not sure there's much value in asking people to re-type up stuff that's already well-documented elsewhere. Do a bit more research; you should find lots of information about it. You might also want to refer to the site faq and help center. As the help center explains, "IT Security Stack Exchange is for Information Security professionals..." (I've bolded the key term).
Jul
23
comment Why is Un1c0rn exposing wget on heartbleed?
@user40242, I think your question about "why" has been answered about as well as one could expect. Any further comments/complaints/rants should be directed to the authors/administrators of that web site.
Jul
23
comment Why do static code analyzers cite CWE rather than CVE in their findings?
This is not a discussion forum. Answers should not be used to ask questions. You might like to refer to the help center and faq for more information about how this site works.
Jul
23
comment Why do static code analyzers cite CWE rather than CVE in their findings?
What research have you done on your own? What are your thoughts? I'd expect you to do some research and thinking on your own before asking, and show us in the question what you've tried.
Jul
23
comment Encrypted code in hacked wordpress site
What research have you done? There's lots written on analyzing obfuscated Javascript. Depending on your experience level, the answer might be "you don't know enough to make analyzing the code a worthwhile avenue to pursue".
Jul
23
comment Are Internet Explorers “Tracking Protection” able to prevent AddThis canvas fingerprinting?
Perhaps they ask because they're not concerned about their own browsing, but are interested in how many users are affected by this sort of tracking? Perhaps they ask because they are using a browser that does not support Adblock Plus?
Jul
23
comment Does the SSL termination happen with the ISP or a mobile service provider?
Thanks, @user917279. No problem: we won't lose Thomas's excellent answer (it'll still be here), and we can even ask the moderators to merge it into that question if this gets closed as a dup (just click "flag" underneath his answer to flag it for moderator attention and ask them to merge his answer into the other one).
Jul
23
comment Grep a destination IP in Netstat results in realtime - windows 7
This question appears to be off-topic because it is not about Information Security as specified in the faq.
Jul
22
awarded  Enlightened
Jul
22
comment Does the SSL termination happen with the ISP or a mobile service provider?
What research have you done? Click on the man-in-the-middle tag, or peruse the "Related" questions sidebar, and you'll find dozens of questions here that talk about MITM attacks and what is possible. Next time, please do more research before asking.
Jul
22
awarded  Nice Answer
Jul
18
awarded  Nice Answer