meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 6 months |
| seen | Mar 16 at 19:44 | |
| stats | profile views | 583 |
|
May 4 |
awarded | Popular Question |
|
Apr 8 |
awarded | Nice Answer |
|
Feb 25 |
awarded | Guru |
|
Feb 17 |
comment |
How to harden an iPhone/Android app so its tough to reverse-engineer it? the "splitting users into two categories" part of this answer is poor advice. i do not suggest counting on non-jailbroken devices. people will have jailbroken devices and you can't stop them if they are savvy enough to prevent MDM, EMM, MAM, or MCM policies by reverse engineering those apps before installing them, potentially patching the binaries or patching the runtime with method swizzling or the like. |
|
Feb 17 |
answered | Secure one-time-use credit cards |
|
Feb 17 |
comment |
Are jailbroken iPhones an enterprise security risk? If someone is savvy enough, they can always hide the fact that they have a jailbroken device in the environment. Hopefully that person is a pen-tester "white hat" employee or partner. |
|
Feb 17 |
comment |
Sharing wifi at a business - Bad Policy? A word of warning that separate hardware be used instead of "isolation" technology (some of which is mentioned or alluded to in the comments below). pen-testers can use setups such as wifitap to bypass these weak protections -- github.com/gdssecurity/wifitap |
|
Feb 17 |
revised |
What are the best practices for maintaining privacy on a non-jailbroken iOS device? added 1 characters in body |
|
Feb 14 |
awarded | Notable Question |
|
Feb 5 |
awarded | Popular Question |
|
Jan 2 |
answered | How to track down an IP spoofer? |
|
Dec 31 |
revised |
Designing in zero day attack mitigations updated EMET link |
|
Dec 17 |
comment |
Secure Development costs @agelastic: There are many authors of that book. Security is not a science, and as a proponent of quals over quants, my Poisson distribution suggestion is clearly not the end-all-be-all. However, I'd like to hear your ideas about incident-oriented and evidence-based risk management in information security management practices, if you have any. Why don't you give a go at an answer? |
|
Dec 6 |
comment |
Secure Development costs @agelastic: that's not true. your comment is untrue. please back it up with facts and/or references. |
|
Nov 14 |
awarded | Yearling |
|
Oct 16 |
answered | How to pentest Flash file on webapp with alowscriptaccess=samedomain? |
|
Oct 16 |
answered | What does HP DriveLock do to your password? |
|
Oct 16 |
comment |
How would I go about rebuilding the IAT of a packed executable? It may be easier to dump the process memory with e.g. pdmp.c or OllyDbg OllyDump so that that IAT is automatically rebuilt. |
|
Oct 16 |
comment |
How to best present 'Security Vulnerability Feedback' to devs in the IDE (like VisualStudio) Why not just write this into the VM? |
|
Oct 16 |
awarded | Enlightened |
