meta user
network profile
| bio | website | sitewat.ch |
|---|---|---|
| location | Teresina, Brazil | |
| age | ||
| visits | member for | 1 year, 9 months |
| seen | May 2 at 0:25 | |
| stats | profile views | 18 |
Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.
I have been writing exploit code for more than 5 years. I have found numerous vulnerabilities. I have received three severity metrics from the Department of Homeland Security. The most severe is in the top 500 more dangerous software flaws of all time.
My CVE numbers:
CVE-2011-0050 CVE-2011-0049 CVE-2011-0048 CVE-2009-1759 CVE-2009-0468 CVE-2009-0467 CVE-2009-0389 CVE-2008-6975 CVE-2008-6499 CVE-2008-6498 CVE-2008-5621 CVE-2008-2043 CVE-2008-2002 CVE-2007-6485 CVE-2007-6458 CVE-2007-6459 CVE-2007-6471 CVE-2007-5646 CVE-2007-0134 CVE-2007-0132 CVE-2007-0130 CVE-2006-6781 CVE-2006-6780 CVE-2006-3208 CVE-2006-3207 CVE-2006-3206 CVE-2006-3205 CVE-2006-3204 CVE-2006-3203
|
Feb 7 |
accepted | Is there a problem with constructing a CSPRNG using MD5 or SHA1? |
|
Sep 5 |
accepted | How is block cipher padding verified for consistancy? |
|
Aug 31 |
accepted | Malleability attacks against encryption without authentication |
|
Aug 13 |
accepted | Byte location of plaintext vs ciphertext when using a block cipher or stream cipher |
|
May 4 |
accepted | Why does a broken hash function undermine an HMAC? |
|
May 4 |
accepted | Efficient and stateless anti-forgery method |
|
Mar 20 |
accepted | Using a Non-Random IV with modes other than CBC |
|
Aug 21 |
accepted | Are these emerging threats against AES affecting your designs? |
|
Aug 13 |
accepted | Why can't one implement bcrypt in Cuda? |
