2,487 reputation
1727
bio website ladadadada.net
location London, United Kingdom
age 32
visits member for 2 years, 3 months
seen 11 hours ago
stats profile views 138

I'm an Australian by birth but currently live in London. I'm a traveller at heart and I love seeing how different the rest of the world is. I'm always up for something new and interesting.

I've been playing with computers pretty much my whole life, working with them since 2000 in tech support and programming and as a full-time Sysadmin since 2006. I've been fascinated by security since about 2003 and I tend to become the default "security guy" at most places I have worked.

I enjoy all forms of sport and outdoors activities but particularly cycling, hockey, sailboarding, snowboarding, camping and Frisbee. I'm also passionate about the environment, growing my own food, cooking it and eating it.


11h
comment IMG tag vulnerability
It's not a security vulnerability, but the bad guy can change the content of the image at any time. I saw one case where a website owner responded to hotlinking by replacing the expected image with bestiality porn.
2d
revised Best source(s) for security related news?
Change link to Mikko's current Twitter account.
May
19
reviewed Approve suggested edit on Known plaintext; What cipher is being used here?
May
15
comment Malicious Links that Respond to Browsers but not curl or wget
Indeed, I do too now. Maybe it's adapting.
May
15
comment Malicious Links that Respond to Browsers but not curl or wget
How did you change curl's User-Agent? I tried it with curl -A "Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.10.289 Version/12.02" "http://tfdesignsandpcrepair.com/dinwnle.php?get_info=ss00_323" and the page gave me the zip file.
May
15
revised Malicious Links that Respond to Browsers but not curl or wget
Fix URLs.
May
8
awarded  Nice Answer
May
8
reviewed Approve suggested edit on Is it possible for a hacker to download a php file without executing it first?
May
3
reviewed Reviewed Is there a tool I can use to see if my website is being blocked by common business content filters?
May
3
reviewed No Action Needed Send credentials by sms
May
1
reviewed Reject suggested edit on Lessen impact of DoS attack on cpu-expensive login?
Apr
29
awarded  Custodian
Apr
26
reviewed Approve suggested edit on Configure SSL Mutual (Two-way) Authentication
Apr
26
comment how secure is passwordcard.org?
You handle criticism well. That's a very reassuring trait in a developer. I look forward to seeing the improvements.
Apr
24
reviewed Reviewed Can an employer access Whatsapp messages if you are using their servers?
Apr
24
reviewed Approve suggested edit on Can an employer access Whatsapp messages if you are using their servers?
Apr
23
reviewed Approve suggested edit on How can browser select suggestions for my private searches?
Apr
23
reviewed Approve suggested edit on Enable RDP for internal network only
Apr
23
reviewed Approve suggested edit on Barracuda antispam access to active directory in dmz : opening port or not?
Apr
23
comment Application access control and time-keeping software
A good way to handle this is to state your problem rather than asking for a product that provides the solution you have already decided on.