28,260 reputation
22967
bio website
location Troy, NY
age 30
visits member for 2 years
seen yesterday

Aug
22
reviewed Leave Open Keychain, rights to open it and save a copy
Aug
22
reviewed Leave Open Downsides to using HTTPS
Aug
21
reviewed Close If you have option to choose between static code analysis vs dynamic code analysis which one would you pick and why?
Aug
21
reviewed Close Printer SSL certificates
Aug
21
reviewed Close Sandbox environment for “php malware” analysis
Aug
19
reviewed Close Application security training for developers
Aug
19
reviewed Close Identifying/decrypting hashed/encrypted data
Aug
19
comment How can I prevent my database from being compromised if my CakePHP app is compromised?
@Dominicp yes, if you decrypt on the server then a persistent attack is still a problem, but it still prevents mass compromise of anything not accessed. If you really need Max security you could have decryption done client side but that'd be tricky.
Aug
18
answered Can I change the CSR of my SSL certificate?
Aug
18
answered Penetration testing preventive or detective control?
Aug
18
reviewed Leave Open Penetration testing preventive or detective control?
Aug
18
reviewed Close Authentication of temporary worker without a badge (physical security)
Aug
18
comment Can we trust antivirus software?
@Agent_L - right, sorry if I wasn't clear, I wasn't disagreeing with you that a virus in a high privilege process isn't a bigger threat, but the question doesn't ask how much of a threat it is, it asks if we can trust AV software. There is no reason to suspect AV software any more than anything else, including the OS itself. I was just pointing out why I didn't mention your point in my answer.
Aug
15
comment How does iOS prevent unauthorised code from running?
@raz - sorry, I'm thinking as a developer where the OS itself is also an application of types. Beyond the kernel, most of the functionality is provided by applications that run as part of the OS, but any high privileged application could be used in theory. I switched it to use the term "high privileged code" to be more clear.
Aug
15
revised How does iOS prevent unauthorised code from running?
added 32 characters in body
Aug
15
answered How can they catch me, how can i hide my self
Aug
15
awarded  public-key-infrastructure
Aug
14
answered Information Security and Financial Risks
Aug
14
comment Fingerprinting the webpage content
If you are trying to do it without being noticed, that is almost impossible. If you want to do it in a way they can't work around, do something that it doesn't matter if they notice, just make it labor intensive to work around.
Aug
14
answered Fingerprinting the webpage content