@Gilles If I tell you, you won't buy my upcoming cookbook, with such classics as the "meat in the middle attack sandwich", triple danish escargot sandwich (3DES), pudding oracle, the list goes on and on.
hey guys, so I posted a question 2 years ago asking about becoming a malware analyst and now that I'm close to finishing school and beginning to decide about what to do at university and stuff, I wanted to revisit my options as there was some conflicting responses and wanted to see what you guys thought.
I still want to do things related to malware analysis but lately I've been developing some automated tools to extract dynamically loaded .NET executables/assemblies onto disk (common in crypters) and perhaps thought about focusing on the coding aspect of malware analysis. It's really difficult to decide or make a clear cut decision.
As per X.509, no problem. You can mix algorithms at will. Each signature is independent.
(X.509 includes a special provision for when a CA uses DSS and issues a certificate that also uses DSS with the same group parameters, in which case the issued certificate may omit the group parameters. This...
Hopefully I managed to salvage 2 upvotes before the Bear came :)
X.509 is open-ended, so you could define your own signature format, with identifying OID, that is in fact two signatures, one using SHA-1, the other using SHA-256.
But this would be supported only by software made aware of your new signature algorithm, so this is pointless (I assume you want SHA-1 for backward compatibility).
So if you want a certificate that uses both SHA-1 and SHA-256, just make two certificates.
Is my computer vulnerable to someone who knows my modem's MAC address and my public IP address? What kind of vulnerabilities would this imply?
Could they actually get access to my computer just with this information?
yeah well... I get that, but on the other hand - actual clueless newbs, who might actually be looking for an answer, would not find that helpful (I hope), and consider us much as we consider ServerFault.
Is my computer vulnerable to someone who knows my modem's MAC address and my public IP address? What kind of vulnerabilities would this imply?
Could they actually get access to my computer just with this information?
