902 reputation
310
bio website security.stackexchange.com
location United States
age 34
visits member for 2 years
seen Oct 16 at 1:33

I'm a programmer that does some security work. I went to school for security stuff and have a stack of certifications. I hope to be a useful contributor to the community.


Feb
11
comment PHP injection on 777 file
Cory, possibly not helpful but you get the ups for the cut of your jib :-P
Jan
29
revised How can I find websites owned by a particular company?
added 565 characters in body
Jan
29
comment How can I find websites owned by a particular company?
No. I provided a reference. The main page of the website makes it very clear what the service provides. If you refuse to think for yourself I can't really feel too bad about it.
Jan
29
answered How can I find websites owned by a particular company?
Jan
24
comment How to find a reliable private mail drop or ghost address provider? (Not CMRA)
I may be missing the point of what you are looking for here. Do you want something like a dodgeit or mailinator service, or something else?
Jan
24
comment How to implement a Web of Trust?
If you do a quick search of SE you will find dozens of references to the web of trust 'problem'. You may find luck starting there.
Jan
23
answered What type of data does Snort log?
Jan
22
comment Can a salted hash be an effective MAC?
Assuming a perfect entropy pool, of course.... Good post/explanation.
Jan
22
comment Is it possible to detect password length from hash? Does doubling your password add more security?
GAHHHH! Iszi and I are apparently on the same brain wave today :-) "missed it by thaaaat much!"
Jan
22
answered Is it possible to detect password length from hash? Does doubling your password add more security?
Jan
15
comment How do you build a secure web application that is also COPPA compliant?
I would specifically avoid the credit card authentication mechanism. Introducing credit card transaction of any size brings with it the necessity for PCI compliance. This can be a costly and time consuming headache for an organization that isn't dealing with transactions normally. For more info: pcicomplianceguide.org
Jan
15
answered How do you build a secure web application that is also COPPA compliant?
Jan
11
answered Good (preferably free) resource for CISSP practice questions
Jan
10
comment How is Tor secure?
Without being too snarky; you really could just google this and get all the information you need. If you have a specific question about how the onion router protocols work or how configure them that's one thing but a simple web search will provide this information, and SO much more, for you. Without even doing a search you might want to start with www.torproject.org It is far better for you to gain your own understanding than for us to just regurgitate info-bytes back to you. Best of luck.
Dec
28
awarded  Commentator
Dec
28
comment How to simulate a WEP cracking scenario for faster cracking in local lab?
something I've done in the past that has worked well, but is admittedly a bit 'rigged': #!/bin/bash for((;;)) do curl [router_default_web_gateway_interface] done :-) Best of luck with your project & presentation.
Dec
27
awarded  Student
Dec
27
comment How can a novice find proof of a system compromise?
You're not wrong Clockwork-Muse. I generally recommend that AV/Scanners are a good first step because they are within the realm of due care and due diligence for a standard user, and every reputable AV/Scanner that I know of keeps a log of it's actions on the system which is good- just in case. Yes, all of these things can be circumvented (see Sophos from a few weeks back) but they are reasonable precautions that a user/owner can be expected to take. When in doubt, take it to a pro. When curious, give it a good check up.
Dec
26
answered How can a novice find proof of a system compromise?
Dec
26
revised How to simulate a WEP cracking scenario for faster cracking in local lab?
added 618 characters in body