508 reputation
313
bio website sitewat.ch
location Teresina, Brazil
age
visits member for 3 years
seen May 6 at 16:57

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 5 years. I have found numerous vulnerabilities. I have received three severity metrics from the Department of Homeland Security. The most severe is in the top 500 more dangerous software flaws of all time.

My CVE numbers:

CVE-2011-0050 CVE-2011-0049 CVE-2011-0048 CVE-2009-1759 CVE-2009-0468 CVE-2009-0467 CVE-2009-0389 CVE-2008-6975 CVE-2008-6499 CVE-2008-6498 CVE-2008-5621 CVE-2008-2043 CVE-2008-2002 CVE-2007-6485 CVE-2007-6458 CVE-2007-6459 CVE-2007-6471 CVE-2007-5646 CVE-2007-0134 CVE-2007-0132 CVE-2007-0130 CVE-2006-6781 CVE-2006-6780 CVE-2006-3208 CVE-2006-3207 CVE-2006-3206 CVE-2006-3205 CVE-2006-3204 CVE-2006-3203


Aug
21
comment How long would the 100 Year Cryptography Project have secured its data had it been started 100 years ago?
+1 I like this post a lot. 100 years ago they where basically cave men pounding two rocks together, and in 100 years we'll be viewed in the same way.
Aug
21
comment Are these emerging threats against AES affecting your designs?
@jug No system is going to last 100 years but that's the attitude you need in order to build a system that can stand up to attacks that are happening right now.
Aug
21
comment Are these emerging threats against AES affecting your designs?
I like the link and the idea of a 100 year crypto system. I think this is a pragmatic approach.
Aug
21
accepted Are these emerging threats against AES affecting your designs?
Aug
17
awarded  Editor
Aug
17
awarded  Critic
Aug
17
comment Why does PBKDF2 xor the iterations of the hash function together?
@Thomas Pornin +1 good post, why don't you have any interest in proving PBKDF2? Perhaps you don't rely upon it.
Aug
17
asked Are these emerging threats against AES affecting your designs?
Aug
13
comment Why can't one implement bcrypt in Cuda?
scrypt is really cool! What do you think of using memory-hard algorithms for key derivation and password storage? If I am not mistaken PBKDF2 is operation-hard and is there for is optimal for cracking with a GPU or FPGA.
Aug
13
awarded  Scholar
Aug
13
accepted Why can't one implement bcrypt in Cuda?
Aug
13
awarded  Supporter
Aug
13
awarded  Student
Aug
13
asked Why can't one implement bcrypt in Cuda?
Mar
6
comment Is Wiener's attack on RSA extendable to larger keys with low hamming weight?
@SecureFish yeah idk man maybe you should read the textbook. Also you should put @rook if you want to contact me, otherwise i'm not going to get your message.
Mar
6
comment Is Wiener's attack on RSA extendable to larger keys with low hamming weight?
This is a complex question and its better to break it up.