508 reputation
312
bio website sitewat.ch
location Teresina, Brazil
age
visits member for 2 years, 8 months
seen Jan 17 at 20:21

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 5 years. I have found numerous vulnerabilities. I have received three severity metrics from the Department of Homeland Security. The most severe is in the top 500 more dangerous software flaws of all time.

My CVE numbers:

CVE-2011-0050 CVE-2011-0049 CVE-2011-0048 CVE-2009-1759 CVE-2009-0468 CVE-2009-0467 CVE-2009-0389 CVE-2008-6975 CVE-2008-6499 CVE-2008-6498 CVE-2008-5621 CVE-2008-2043 CVE-2008-2002 CVE-2007-6485 CVE-2007-6458 CVE-2007-6459 CVE-2007-6471 CVE-2007-5646 CVE-2007-0134 CVE-2007-0132 CVE-2007-0130 CVE-2006-6781 CVE-2006-6780 CVE-2006-3208 CVE-2006-3207 CVE-2006-3206 CVE-2006-3205 CVE-2006-3204 CVE-2006-3203


Aug
13
comment MD5 pre-fixing with an unkown postfix
@fgrieu yes, you are correct.
Aug
13
revised MD5 pre-fixing with an unkown postfix
deleted 9 characters in body
Aug
13
awarded  Yearling
Aug
12
asked MD5 pre-fixing with an unkown postfix
Aug
10
awarded  Popular Question
Jun
22
asked Byte location of plaintext vs ciphertext when using a block cipher or stream cipher
May
4
accepted Why does a broken hash function undermine an HMAC?
May
4
accepted Efficient and stateless anti-forgery method
May
3
awarded  Nice Question
Apr
10
asked Why does a broken hash function undermine an HMAC?
Apr
6
comment Efficient and stateless anti-forgery method
@Ilmari Karonen Its applied cryptography, but I don't think they will help. I am asking for a new crypto design.
Apr
6
revised Efficient and stateless anti-forgery method
edited title
Apr
6
asked Efficient and stateless anti-forgery method
Mar
20
accepted Using a Non-Random IV with modes other than CBC
Nov
23
asked Using a Non-Random IV with modes other than CBC
Oct
30
awarded  Teacher
Oct
27
answered How can Cipher Block Chaining (CBC) in SSL be attacked?
Aug
21
awarded  Commentator
Aug
21
comment How long would the 100 Year Cryptography Project have secured its data had it been started 100 years ago?
@Chad Yeah but that wouldn't have been a problem if we didn't have Alan Turing on our side.
Aug
21
comment How long would the 100 Year Cryptography Project have secured its data had it been started 100 years ago?
+1 I like this post a lot. 100 years ago they where basically cave men pounding two rocks together, and in 100 years we'll be viewed in the same way.