3,652 reputation
11234
bio website ladadadada.net
location London, United Kingdom
age 34
visits member for 3 years, 6 months
seen 4 hours ago

I'm an Australian by birth but currently live in London. I'm a traveller at heart and I love seeing how different the rest of the world is. I'm always up for something new and interesting.

I've been playing with computers pretty much my whole life, working with them since 2000 in tech support and programming and as a full-time Sysadmin since 2006. I've been fascinated by security since about 2003 and I tend to become the default "security guy" at most places I have worked.

I enjoy all forms of sport and outdoors activities but particularly cycling, hockey, sailboarding, snowboarding, camping and Frisbee. I'm also passionate about the environment, growing my own food, cooking it and eating it.


Mar
31
reviewed Approve suggested edit on How often should I reset my salt?
Mar
28
reviewed Approve suggested edit on How exactly are physically unclonable functions used in authenticaton if they are unclonable?
Mar
27
comment Is it a real security benefit if a host uses static IP Addresses for authentication?
There was a similar question a couple of years ago where I came to a very similar conclusion to Rory. It is a measurable improvement in security depending on how many systems can use the IP address but it is not adequate on its own.
Mar
26
answered MySQL authentication, how to pad the 20-byte salt
Mar
24
answered SSL Certificate for an email server
Mar
7
awarded  Taxonomist
Mar
7
comment Is “bug banking” occurring?
I disagree with the opinion-based close vote. This question can be answered with statistics from vulnerability databases and Microsoft's own security advisories.
Mar
4
reviewed Reject suggested edit on When changing a PGP passphrase, does it only affect the private key?
Mar
3
reviewed Approve suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Feb
28
comment Is it insecure to send an email from a PHP script to an email address on the same domain?
One specific way this can fail is when the MX record differs from the A record for the root of the domain. This is very common for larger sites. By the time you need a load balancer on your website, your MX record is pointing somewhere else. (Ignoring the possibility of split horizon DNS).
Feb
27
comment Does Google use extended validation certificates
It doesn't make a lot of sense for Google to use EV certificates on google.com and youtube.com because the domains are the primary trust point. It might make sense on domains connected to real-world Google things such as Android phones so that users can be certain that the domain is owned by the same company that made the phone.
Feb
26
comment How do I determine where ssh login attempts are coming from?
SSH is a protocol that runs over TCP and TCP connections can't be spoofed. That is the true IP your machine saw connecting to it. It might be interesting to see the firewall rule if you still have it.
Feb
25
revised Starting out, where should I be looking for vulns? Big bounty sites vs. smaller projects?
added 550 characters in body
Feb
25
revised Starting out, where should I be looking for vulns? Big bounty sites vs. smaller projects?
added 479 characters in body
Feb
25
answered Starting out, where should I be looking for vulns? Big bounty sites vs. smaller projects?
Feb
21
awarded  Yearling
Feb
19
reviewed Approve suggested edit on Server Encryption - Best practice
Feb
19
reviewed Approve suggested edit on Can closing port 80 lead to more security?
Feb
19
answered Is it normal for a payment procedure to ask for third party cookies to be turned on?
Feb
17
comment What if I've been hacked and my IP is static?
Using the house analogy that is so popular for IP addresses, you found an intruder in your house and chased him away but now you're worried he might be able to get back in because you haven't moved your house. The proper response is to install locks, fences and a burglar alarm.