7,456 reputation
1633
bio website
location
age
visits member for 3 years, 8 months
seen Jul 25 at 4:39

Jul
15
comment How bad is the leaking of Internal IP addresses through external DNS
I'm talking about security issues, not performance issues. Check out more at -- web.archive.org/web/20050728133540/http://www.as112.net
Jun
10
comment Suggestions on easy distribution/installation of self signed certificates & roots to mobile devices
Use Google Apps Mobile Management
Jun
10
comment How do you capture ALL the traffic from an Android app?
ZAP doesn't include many of the features that Burp does, such as the per-hostname CA-signed certificate wildcarding. Both ZAP and Burp should be able to be configured to intercept on a DNS blackholing host, but I don't know how to configure ZAP to do that since I rarely use it. In my opinion, you should learn Burp, too.
Mar
23
comment Where does Active Directory store user hashes?
Here's a Volume Shadow Service script I bookmarked from DerbyCon 2 -- code.google.com/p/ptscripts/source/browse/trunk/windows/…
Mar
12
comment Encrypting files on Google Drive
Like the other person answered, use portable 7-zip
Feb
21
comment Risk management with software code analysis
I don't have to start a good answer. I just have to finish one.
Feb
21
comment Risk management with software code analysis
You guys obviously missed my section on self assessment! Try to read!
Feb
19
comment Anyone out there using Umbrella from OpenDNS? What exactly is it?
Thanks for the question. Umbrella was on my list of things to learn about from information I gathered at presentations during NullCon last week. I'm also interested in the ShadowServer databases, crysys.hu (and other malware repos), and the malware prevalence service from virtusbtn.com
Feb
19
comment Major differences between Kali and SecurityOnion
Agree that it's not the scope of this site, but as one security professional to another, it might be interesting to hear an infosec-centric view, but with a link to an outside source such as ServerFault. Not sure that I agree on separation of duties (although it is a good security principle in general) because convergence is often necessary -- adversaries test their attack tools with our defense tools, as an example. I'm very familiar with rolling my own attack and defense tools and this sparked a new question for me, thank you!
Feb
18
comment How hard is it to read flash memory off a chip?
Excellent answer! What types of probes/cables do you use with the BusPirate? Syringes? Tweezer-style clips? Pin leads or probe cables? Connectorized or separated? Besides test targets, I'd be curious to hear about your toolkit for use with the BusPirate, which test accessories you use, and how you assemble them. Hate to go too off topic, but my curiosity is peaked!
Feb
17
comment How hard is it to read flash memory off a chip?
That's a fair answer. What would you do if you had a bigger budget and also pretend that Bus Pirate didn't exist. What would you use instead? Isn't the Bus Pirate just a glorified serial-friendly vesion of the Arduino but made by TI?
Feb
17
comment How hard is it to read flash memory off a chip?
Can we get more details on the commands or steps one would take using a Bus Pirate?
Feb
17
comment airgap a smartphone?
Use an EDEC Black Hole Faraday Bag
Feb
17
comment Benefits to BlackArch over Kali
Just checked out BlackArch now -- also noticed that it uses capstone-engine.org -- thanks for the recommendation @Evan!
Feb
17
comment Major differences between Kali and SecurityOnion
Answers that incorporate PPA/Launchpad and large-installation distribution are preferred
Feb
17
comment How to harden an iPhone/Android app so its tough to reverse-engineer it?
the "splitting users into two categories" part of this answer is poor advice. i do not suggest counting on non-jailbroken devices. people will have jailbroken devices and you can't stop them if they are savvy enough to prevent MDM, EMM, MAM, or MCM policies by reverse engineering those apps before installing them, potentially patching the binaries or patching the runtime with method swizzling or the like.
Feb
17
comment Are jailbroken iPhones an enterprise security risk?
If someone is savvy enough, they can always hide the fact that they have a jailbroken device in the environment. Hopefully that person is a pen-tester "white hat" employee or partner.
Feb
17
comment Sharing wifi at a business - Bad Policy?
A word of warning that separate hardware be used instead of "isolation" technology (some of which is mentioned or alluded to in the comments below). pen-testers can use setups such as wifitap to bypass these weak protections -- github.com/gdssecurity/wifitap
Dec
17
comment Secure Development costs
@agelastic: There are many authors of that book. Security is not a science, and as a proponent of quals over quants, my Poisson distribution suggestion is clearly not the end-all-be-all. However, I'd like to hear your ideas about incident-oriented and evidence-based risk management in information security management practices, if you have any. Why don't you give a go at an answer?
Dec
6
comment Secure Development costs
@agelastic: that's not true. your comment is untrue. please back it up with facts and/or references.