3,812 reputation
11235
bio website ladadadada.net
location London, United Kingdom
age 34
visits member for 3 years, 9 months
seen 8 hours ago

I'm an Australian by birth but currently live in London. I'm a traveller at heart and I love seeing how different the rest of the world is. I'm always up for something new and interesting.

I've been playing with computers pretty much my whole life, working with them since 2000 in tech support and programming and as a full-time Sysadmin since 2006. I've been fascinated by security since about 2003 and I tend to become the default "security guy" at most places I have worked.

I enjoy all forms of sport and outdoors activities but particularly cycling, hockey, sailboarding, snowboarding, camping and Frisbee. I'm also passionate about the environment, growing my own food, cooking it and eating it.

https://twitter.com/ladadadada


Apr
14
comment Is crypto.js vulnerable to heartbleed attack?
Where does your crypto.js come from? Are you talking about this one on Google Code?
Apr
14
reviewed Approve suggested edit on Why improvising your own Hash function out of existing hash functions is so bad
Apr
13
revised Is Google Drive security compromised?
Fixed spelling and stopped linking to malicious websites.
Apr
8
reviewed Approve suggested edit on What should a website operator do about the Heartbleed OpenSSL exploit?
Apr
5
comment Certificate services will not start with “server is offline” error
What product are you using? This may be better suited to ServerFault but don't worry, we'll migrate it if it is.
Apr
1
reviewed Approve suggested edit on Is it possible to completely wipe a flash memory?
Apr
1
reviewed Approve suggested edit on Is it possible to completely wipe a flash memory?
Mar
31
reviewed Approve suggested edit on How often should I reset my salt?
Mar
28
reviewed Approve suggested edit on How exactly are physically unclonable functions used in authenticaton if they are unclonable?
Mar
27
comment Is it a real security benefit if a host uses static IP Addresses for authentication?
There was a similar question a couple of years ago where I came to a very similar conclusion to Rory. It is a measurable improvement in security depending on how many systems can use the IP address but it is not adequate on its own.
Mar
26
answered MySQL authentication, how to pad the 20-byte salt
Mar
24
answered SSL Certificate for an email server
Mar
7
awarded  Taxonomist
Mar
7
comment Is “bug banking” occurring?
I disagree with the opinion-based close vote. This question can be answered with statistics from vulnerability databases and Microsoft's own security advisories.
Mar
4
reviewed Reject suggested edit on When changing a PGP passphrase, does it only affect the private key?
Mar
3
reviewed Approve suggested edit on What is the most hardened set of options for GCC compiling C/C++?
Feb
28
comment Is it insecure to send an email from a PHP script to an email address on the same domain?
One specific way this can fail is when the MX record differs from the A record for the root of the domain. This is very common for larger sites. By the time you need a load balancer on your website, your MX record is pointing somewhere else. (Ignoring the possibility of split horizon DNS).
Feb
27
comment Does Google use extended validation certificates
It doesn't make a lot of sense for Google to use EV certificates on google.com and youtube.com because the domains are the primary trust point. It might make sense on domains connected to real-world Google things such as Android phones so that users can be certain that the domain is owned by the same company that made the phone.
Feb
26
comment How do I determine where ssh login attempts are coming from?
SSH is a protocol that runs over TCP and TCP connections can't be spoofed. That is the true IP your machine saw connecting to it. It might be interesting to see the firewall rule if you still have it.
Feb
25
revised Starting out, where should I be looking for vulns? Big bounty sites vs. smaller projects?
added 550 characters in body