1,687 reputation
110
bio website
location Scotland
age
visits member for 1 years, 4 months
seen Feb 21 at 12:21

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance. My company also provides forensic analysis for the legal community in Scotland.


Aug
14
comment Door locks & deadbolt appropriate for exterior office door with decorative glass next to it
or indeed use the principle of layered security and provide better security for the things that lie behind this door. i.e. assume that the door will always be a threat and apply security to the things inside.
Aug
12
answered Is there a generic list of IT Risks that can be used as a reference to prepare an IT Risk Assessment report?
Aug
2
comment Why would one increment card security code for a new payment card
The first 6 digits is usually called the Issuer Identification Number, oldies call it the Bank Identification number (BIN). The rest of the number can be used in any way by the bank, but the last digit of the PAN (the big number on the card) is a check digit using the Luhn algorithm.
Aug
2
answered Using authentication only one time passwords
Jul
26
awarded  Scholar
Jul
26
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
thanks. I've/My company has plenty of forensics and legal experience but mobile, especially iThings are new. Answer has been helpful to convince me to outsource this bit of the job and look at investing in this area in the longer term. thanks!
Jul
26
accepted How do I forensically determine whether a mobile phone has been infected with a spy suite?
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
note: clearly there are three ways of imaging an iphone: Zdziarski, jailbreak or using software like IXAM. However, Zdziarski and Jail breaking both alter the phone and the Zdziarski method only gives one access to the user file area. I've not used FTS iXAM before. Therefore, whilst it is easy to write an answer saying "image the phone" - it's actually quite a hard thing to do for later model iPhones and, as far as I can see, they only image of the user file area (which is of little interest to me)
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
I should note that whilst the phones have been used by staff continually, it would be prudent to work from an image and follow (my country) evidence gathering framework otherwise the argument will be destroyed in court. Even if I find a positive evidence it probably won't be used directly, instead we'll go after the spysuite service provider for evidence.
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
The work is pre-trial evidence gathering - however, what I'd be interested in is how to digitally image a phone such as an iphone that can be done at a cost that makes sense for the client.
Jul
24
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
This answer allows for a non-intrusive "quick check" and allows the phone to operate normally without affecting the evidence. We could ring it, SMS it and so on and look for spurious traffic with a sniffer.
Jul
24
awarded  Student
Jul
24
asked How do I forensically determine whether a mobile phone has been infected with a spy suite?
Jun
21
awarded  Nice Answer
Jun
19
revised Is there any way to tell if CCTV is on or not?
added 25 characters in body
Jun
19
answered Is there any way to tell if CCTV is on or not?
May
15
comment Unsolicited Password Request from Facebook
interestingly, my wife got one of these for the first time on her Android yesterday. The message also included the name and location "Howard from Houston" and asked her "do you know this person?" to which she said no and then she was forced to change her password in the Android app (did not ask for old passwd). The problem is that the user has no cue as to whether it is real or not.
Mar
7
comment How do I get my Encryption Certificate back?
do you know if the user backed up the certificates?
Mar
7
comment CSRF mitigation in MVC
if the app was totally stateless then I don't think a CSRF would be possible. So... there must be a session state being recorded somewhere. If it's a java-based app then you'd naturally use the HttpSession.
Mar
7
answered Reading for starter in Computer System Security