rednovae
Re:NetUSB Impacts the Security of Millions of Devices Worldwide
on Wednesday May 20, 2015 @09:59AM (#9576328)
I have reported vulns to NetGear before. They don't have any sort of security department, nor a method to handle vulnerability reports.
I have no idea what the truth actually is, but my experience would lead me to believe worst case.
Re:Implementing a Virtual Machine in C
on Saturday May 09, 2015 @06:00PM (#9517863)
Not an article, but this is a register-based VM that should be simple and straight-forward to understand. Also comes with an assembler, disassembler and debugger.
Re:The Anti-Drone Drone
on Monday May 04, 2015 @12:31AM (#9484311)
This isn't an article, it's a paragraph!
Re:Ask HN: Brag about open-source projects you're proud of
on Friday April 24, 2015 @04:49PM (#9435928)
https://github.com/endeav0r/hsvm - 16-bit virtual machine with a bunch of reversing and exploitation challenges.
https://github.com/endeav0r/rdis - Visual reverse-engineering tool for Linux with custom graph layout stuff.
Re:The SSL/TLS handshake
on Wednesday January 28, 2015 @05:21PM (#8962923)
If my password is catsanddogs, there is not much entropy in this password. If the connection was based off symmetric crypto from the get go, where the key was seeded from that password, you could capture some traffic and offline attack the key based off a weak user password.
The alternative is safer. You would have to brute force the login online.
I think you don't know what an IV is. The IV is not secret. Maybe that's where the confusion comes from?