meta user
network profile
| bio | website | sitewat.ch |
|---|---|---|
| location | Teresina, Brazil | |
| age | ||
| visits | member for | 1 year, 10 months |
| seen | May 2 at 0:25 | |
| stats | profile views | 18 |
Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.
I have been writing exploit code for more than 5 years. I have found numerous vulnerabilities. I have received three severity metrics from the Department of Homeland Security. The most severe is in the top 500 more dangerous software flaws of all time.
My CVE numbers:
CVE-2011-0050 CVE-2011-0049 CVE-2011-0048 CVE-2009-1759 CVE-2009-0468 CVE-2009-0467 CVE-2009-0389 CVE-2008-6975 CVE-2008-6499 CVE-2008-6498 CVE-2008-5621 CVE-2008-2043 CVE-2008-2002 CVE-2007-6485 CVE-2007-6458 CVE-2007-6459 CVE-2007-6471 CVE-2007-5646 CVE-2007-0134 CVE-2007-0132 CVE-2007-0130 CVE-2006-6781 CVE-2006-6780 CVE-2006-3208 CVE-2006-3207 CVE-2006-3206 CVE-2006-3205 CVE-2006-3204 CVE-2006-3203
|
Aug 21 |
comment |
How long would the 100 Year Cryptography Project have secured its data had it been started 100 years ago? @Chad Yeah but that wouldn't have been a problem if we didn't have Alan Turing on our side. |
|
Aug 21 |
comment |
How long would the 100 Year Cryptography Project have secured its data had it been started 100 years ago? +1 I like this post a lot. 100 years ago they where basically cave men pounding two rocks together, and in 100 years we'll be viewed in the same way. |
|
Aug 21 |
comment |
Are these emerging threats against AES affecting your designs? @jug No system is going to last 100 years but that's the attitude you need in order to build a system that can stand up to attacks that are happening right now. |
|
Aug 21 |
comment |
Are these emerging threats against AES affecting your designs? I like the link and the idea of a 100 year crypto system. I think this is a pragmatic approach. |
|
Aug 17 |
comment |
Why does PBKDF2 xor the iterations of the hash function together? @Thomas Pornin +1 good post, why don't you have any interest in proving PBKDF2? Perhaps you don't rely upon it. |
|
Aug 13 |
comment |
Why can't one implement bcrypt in Cuda? scrypt is really cool! What do you think of using memory-hard algorithms for key derivation and password storage? If I am not mistaken PBKDF2 is operation-hard and is there for is optimal for cracking with a GPU or FPGA. |
|
Mar 6 |
comment |
Is Wiener's attack on RSA extendable to larger keys with low hamming weight? @SecureFish yeah idk man maybe you should read the textbook. Also you should put @rook if you want to contact me, otherwise i'm not going to get your message. |
|
Mar 6 |
comment |
Is Wiener's attack on RSA extendable to larger keys with low hamming weight? This is a complex question and its better to break it up. |
