413 reputation
37
bio website
location Sydney, Australia
age
visits member for 3 years, 9 months
seen Feb 27 '13 at 2:01

Good At:
C# VSTO VBA(Excel/Outlook)
SharePoint Asp.NET
SSRS SSIS TSQL TFS (admin/api)

Interest in:
Robotics

currently working on a modern fiction novel:
http://sparkiesmagic.blogspot.com


Feb
21
comment Network Forensics - what is in your toolbox
great question
Feb
11
comment What is your process for wiping a lost Blackberry or similar device?
correct, you can't rely on a wipe, you have to use encryption, preferably with some type of 3rd party device such as a ironkey dongle (not sure if they exist for blackberry).
Jan
19
comment What particular concerns should one bear in mind when wardriving?
Actually I completely disagree with this approach. No doubt releasing information anonymously to the public (for their own good) seems like a good idea at the time... it rarely if ever is. I'm not refering to the OP being sued or whatever, or even vindictive home owners coming after him/her. If you are really going to the effort of providing a public service and not just hacking open networks, why wouldn't you also provide said information privately and confidentially like any other responsible service provider?
Jan
19
comment What particular concerns should one bear in mind when wardriving?
I think so yes. The privacy commissions initial concerns were actually due to the fact that information was being collected from an individuals home which is crossing from the public domain into the private property boundary.
Dec
30
comment What are security issues which are specific to cloud computing?
Actually on availability with the massive resources of hosters like Msft, Amazon, etc you are actually less likely to suffer DDOS/DOS attacks than with a regular web hoster. Therefore while the same caveats that apply to web apps also apply to cloud apps, I'm not sure that the availability issue is necessarily "worse" under cloud.
Dec
30
comment What are security issues which are specific to cloud computing?
Good points Avid although I'm not sure every item you listed falls into the security category, but still all very relevant to Cloud apps. I think your last point is a very important one. The individuals security (the user of your app) is at least as important as your companies security.
Dec
13
comment Computer Forensics: what is in your toolbox?
forensicswiki.org/wiki/Tools:Network_Forensics seems to disagree with you.
Dec
10
comment Computer Forensics: what is in your toolbox?
Actually both those categories which we agree these tools fit into are categories of computer forensics. I'm pretty sure nowhere in the question does it ask only for all in one tools that do all areas of forensics. Sorry for assuming you were a linux fanboy.
Dec
9
comment Computer Forensics: what is in your toolbox?
@AviD, right... and why don't they fit into the categories of network forensics and logfile analysis? wrong OS?
Nov
24
comment Vulnerable OS's?
when you say default are you refering to a patched or unpatched system connected to the network/web?
Nov
24
comment Is it ever appropriate to fight back?
Isn't this called entrapment (legally speaking) unless the government is doing it?
Nov
18
comment Online password managers
I like this idea, will check it out thanks Eric.
Nov
17
comment Is it ever appropriate to fight back?
Totally correct imho. Counter strike is black hat vigilante justice.
Nov
17
comment Designing in zero day attack mitigations
@jaffachief, correct but that is fundementally hard to plan for, Olivier is dealing with the specific case after the vulnerbility is known but before it is patched.
Nov
16
comment Do secure phone lines exist?
I think Mohamed's answer is best in that he is pointing out that this needs to be done on both ends of the phone line so that the "conversation" is encrypted/decrypted at each end. In other words the transport mechanism is by default inherently unsecure.
Nov
16
comment Is external vuln scanning sufficient?
Which I think in effect answers the question perfectly in that what you are saying is that it is impossible to rely on only automated vulnerbility testing software.
Nov
16
comment What techniques do advanced firewalls use to protect againt DoS/DDoS?
+1 for introducing me to the term Bogon Filtering. I'm feeling like a bogan today.. :)
Nov
16
comment How do you defend specifically against attackers utilizing any or all of the commercial exploit kits?
I think in order to practise defence in depth the org would have to download and test each crime pack to identify the specific vunerbilities that their network exposes. Auditing is part of the solution, but you need to know where to look in the logs.