3,652 reputation
11234
bio website ladadadada.net
location London, United Kingdom
age 34
visits member for 3 years, 6 months
seen 3 hours ago

I'm an Australian by birth but currently live in London. I'm a traveller at heart and I love seeing how different the rest of the world is. I'm always up for something new and interesting.

I've been playing with computers pretty much my whole life, working with them since 2000 in tech support and programming and as a full-time Sysadmin since 2006. I've been fascinated by security since about 2003 and I tend to become the default "security guy" at most places I have worked.

I enjoy all forms of sport and outdoors activities but particularly cycling, hockey, sailboarding, snowboarding, camping and Frisbee. I'm also passionate about the environment, growing my own food, cooking it and eating it.


Aug
27
awarded  Scholar
Aug
27
accepted How should I choose a difficulty factor for my password hashing function?
Aug
11
comment REST API: does securing the first call with a CAPTCHA make sense?
You want to use email addresses as an identifier without verifying that the user owns the email address? Why use emails? Why not just let your users choose a unique username and use that as their identifier?
Aug
4
awarded  Nice Answer
Jul
23
comment what type of attack does LOIC do?
According to the screenshot, you can enter a URL which suggests it can also do HTTP flooding.
Jul
22
awarded  Enlightened
Jul
19
comment How do I report a vulnerability?
@SteveDL Yes, and Kaminsky's bug was too but the implementation was common to multiple DNS vendors. djbdns was not affected. Heartbleed was in library code so it too affected multiple vendors. Those were examples of bugs that were dealt with in secret with the vendors so that the exploitability window could be small. A protocol bug would be handled in a similar way.
Jul
19
comment How do I report a vulnerability?
If it's a protocol vulnerability (so it would affect multiple products from multiple vendors) then the people to contact would be the maintainers of the protocol (probably the IETF) and any vendors who implement the protocol. Examples of this being done are Dan Kaminsky's DNS bug from 2008 and the more recent HeartBleed bug. In both cases, much was done in secret by the maintainers and vendors before the rest of us knew anything about it.
Jul
16
comment Which system files are targeted by malware on Windows XP?
Why not hash all of them? Hashes are small.
Jul
11
comment Should I get an antivirus for my Mac?
@sixtyfootersdude There were several anti-virus offerings at the time that solved our particular problem. The cleanup was a pain due to the spread-out nature of the company but cleaning up any single office was easy.
Jul
11
revised Should I get an antivirus for my Mac?
added 1 character in body
Jul
11
revised Should I get an antivirus for my Mac?
Added sentence about Apple's File Quarantine system. Switched "virus" to "malware" in some places.
Jul
10
awarded  Nice Answer
Jul
10
comment Should I get an antivirus for my Mac?
Anti-virus products these days are primarily an engine that runs heuristics and matches signatures. Updates to the heuristics and signatures are pushed out frequently, independently of the engine updates. I see no reason why the engines for both Mac and Windows (and Linux for that matter) wouldn't all use the same signature files. (Anti-virus products usually also do more than just that though. They also try to harden the host and hook themselves in at the lowest level possible. This part will most certainly differ between Mac and Windows.)
Jul
10
comment Should I get an antivirus for my Mac?
@dotancohen They did back in 2003. We had several options to choose from. I don't think they would have regressed that badly in the last decade.
Jul
10
comment Should I get an antivirus for my Mac?
@user11153 Whoops, started a sentence and got distracted looking for evidence to back it up.
Jul
10
revised Should I get an antivirus for my Mac?
Whoops, typo.
Jul
10
revised Should I get an antivirus for my Mac?
added 558 characters in body
Jul
10
revised Should I get an antivirus for my Mac?
added 558 characters in body
Jul
10
answered Should I get an antivirus for my Mac?