27,195 reputation
454119
bio website storyinmemo.com
location Redwood City, CA
age 30
visits member for 4 years, 4 months
seen 6 hours ago

Moderator♦ on Security StackExchange

Ops consultant for some startup

Twitter: @jbferland


Apr
16
comment Deobfuscated Malicious PHP Code Comprehensively
I think that the real correct answer here is to use a debugger and set a breakpoint on the eval() line. Then you can see the exact string that is going to be eval()'d. This is probably going to be a meta discussion about getting a canonical answer to this.
Apr
16
comment Deobfuscated Malicious PHP Code Comprehensively
If you truncate the code then how can we we possibly answer?
Mar
30
reviewed Close Tracing stolen android tablet via MAC address
Mar
14
comment Getting password cracking time and byte storage from bruteforce?
Please oh please don't post an image of a block of text out of your textbook. It's just rude.
Mar
14
comment Getting password cracking time and byte storage from bruteforce?
000A would be two bytes. Aside from that, if you had 4 bytes worth of files (4 billion files), you'd need the 4 billion directory entries to store them. There is no free space to be gained there.
Mar
13
comment Is it possible to construct a passively self-destructing message?
And that's why the very first sentence says "give up on protecting against copying." As soon as somebody has access all the pieces they can all be copied.
Mar
12
awarded  Enlightened
Mar
12
awarded  Nice Answer
Mar
12
awarded  Good Answer
Mar
12
awarded  Nice Answer
Mar
12
answered Is sending passwords through cellphone text messages secure?
Mar
10
awarded  Good Answer
Mar
10
answered Is there any point in using two step authentication if you have strong passwords?
Mar
10
awarded  Enlightened
Mar
10
awarded  Nice Answer
Mar
9
answered How to prevent network administrators from accessing USB drive
Mar
8
comment Is it possible to construct a passively self-destructing message?
But what system is responsible for checking the time and how is it passive? What keeps me from telling a computer it's 1900 or 2100?
Mar
7
awarded  Nice Answer
Mar
7
reviewed Approve How is DDoS possible if you're not listening to the DoS traffic?
Mar
6
comment Why would home routers accept incoming DNS traffic?
Laziness. Cheap router means cheap r&d and it's a few less lines of code and human time to think about or care about disabling DNS on one particular port.