1,777 reputation
211
bio website
location Scotland
age
visits member for 2 years
seen Nov 28 at 16:37

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance. My company also provides forensic analysis for the legal community in Scotland.


Oct
9
asked How should I store and maintain secure configuration documents?
Oct
2
answered Browser Extension to show how your session is being shared
Aug
29
comment What do I need to be aware of to select a transfer method for digital forensic data?
@Thomas is absolutely right about speed. Carving files is very slow on USB2 and below. USB3 may be acceptable but I've not tried it. I sometimes boot a copy of the disk so I can compare it with another RO copy.
Aug
27
answered Difference between Privilege and Permission
Aug
16
comment Are voluntary / manual DDoS illegal?
@HamZa - the question doesn't say, but this would be perfectly legal if the DDoS was being run inside a test environment within an organisation
Aug
16
comment Atm/Debit card Security
UK ATM's use "shuffle" card entry to help reduce the threat of surface skimmers. The card stutters in and out as the card is entered into the machine. Also, machines here tend to use the chip rather than the mag stripe.
Aug
14
comment Door locks & deadbolt appropriate for exterior office door with decorative glass next to it
or indeed use the principle of layered security and provide better security for the things that lie behind this door. i.e. assume that the door will always be a threat and apply security to the things inside.
Aug
12
answered Is there a generic list of IT Risks that can be used as a reference to prepare an IT Risk Assessment report?
Aug
2
comment Why would one increment card security code for a new payment card
The first 6 digits is usually called the Issuer Identification Number, oldies call it the Bank Identification number (BIN). The rest of the number can be used in any way by the bank, but the last digit of the PAN (the big number on the card) is a check digit using the Luhn algorithm.
Aug
2
answered Using authentication only one time passwords
Jul
26
awarded  Scholar
Jul
26
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
thanks. I've/My company has plenty of forensics and legal experience but mobile, especially iThings are new. Answer has been helpful to convince me to outsource this bit of the job and look at investing in this area in the longer term. thanks!
Jul
26
accepted How do I forensically determine whether a mobile phone has been infected with a spy suite?
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
note: clearly there are three ways of imaging an iphone: Zdziarski, jailbreak or using software like IXAM. However, Zdziarski and Jail breaking both alter the phone and the Zdziarski method only gives one access to the user file area. I've not used FTS iXAM before. Therefore, whilst it is easy to write an answer saying "image the phone" - it's actually quite a hard thing to do for later model iPhones and, as far as I can see, they only image of the user file area (which is of little interest to me)
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
I should note that whilst the phones have been used by staff continually, it would be prudent to work from an image and follow (my country) evidence gathering framework otherwise the argument will be destroyed in court. Even if I find a positive evidence it probably won't be used directly, instead we'll go after the spysuite service provider for evidence.
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
The work is pre-trial evidence gathering - however, what I'd be interested in is how to digitally image a phone such as an iphone that can be done at a cost that makes sense for the client.
Jul
24
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
This answer allows for a non-intrusive "quick check" and allows the phone to operate normally without affecting the evidence. We could ring it, SMS it and so on and look for spurious traffic with a sniffer.
Jul
24
awarded  Student
Jul
24
asked How do I forensically determine whether a mobile phone has been infected with a spy suite?
Jun
21
awarded  Nice Answer