Callum Wilson

1,335 reputation

bio	website
	location	Scotland
	age
visits	member for	6 months
	seen	43 mins ago
stats	profile views	29

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance.

	1,335 reputation	bio	website		visits	member for	6 months
7 badges		location	Scotland		seen	43 mins ago

summary answers questions tags badges favorites bounties reputation activity

97 Actions

suggestions reviews revisions comments badges posts accepts all

Jan 10	comment	How do small businesses handle web app security? FWIW, I'm in the same geographic area and industry as Rory and totally agree. Some large organisations (even in finance) can make a complete mess of IT Security, i.e. "too big and complex" to ensure compliance.
Jan 9	comment	Why do some antivirus programs find infections that others miss? is this the same problem: forum.avast.com/index.php?topic=112481.0
Jan 9	comment	Writing malware in java? check out Dalvik. en.wikipedia.org/wiki/Dalvik_%28software%29
Jan 9	awarded	Citizen Patrol
Jan 9	comment	Writing malware in java? some platforms always have a VM, e.g. Android.
Jan 9	comment	Encrypted flash drives the key benefit (relating to the OP question) of using TrueCrypt is that it is platform independent.
Jan 9	comment	Blocking executables at the firewall in the enterprise wildfire is an optional add on with palo alto firewalls - however, most of the big name firewalls have something similar nowadays.
Jan 8	comment	What is the most secure way for two people to communicate? @tylerl - you'd be surprised just how far sound travels over water and the technology used to detect submarines etc can pick up human chatter in water!
Jan 8	answered	How to explain computer security to low-grade students?
Jan 8	comment	What Checkstyle or Findbugs rules detect common vulnerabilities? it's worth mentioning that one of the key advantages of code analysers (like findbugs etc)n is that they can detect issues as the code is being entered by the developer and at "build". Veracode (etc) are really only good for analysing code on release - which is often quite far down the development path.
Jan 8	answered	What Checkstyle or Findbugs rules detect common vulnerabilities?
Jan 7	answered	Blocking executables at the firewall in the enterprise
Jan 7	answered	Why would someone want to encrypt RSS feeds?
Jan 7	comment	Slot machine segfault: what can we determine? looks like the network cable has fallen out and it requires network before proceeding. I imagine a lot of modern gaming machines work like that nowadays.
Jan 4	comment	How to Investigate Wi-Fi Intrusion and where to look for evidence? absolutely, but the OP should be aware that MAC address filtering shouldn't be the only security measure because whilst MAC addresses are meant to be only set by the chip manufacturer; nowadays they can be changed by attackers.
Jan 4	answered	How to Investigate Wi-Fi Intrusion and where to look for evidence?
Jan 3	awarded	Critic
Jan 3	comment	Youtube & Google Services that ID you based on stuff on your computer - what is the risk? a signed Java Applet can do pretty much anything. unsigned applets live inside the sandbox. If it was signed you could probably work out whether the network connection is using MAC addresses from popular WiFi chipmakers but I've not tried it so can't be totally sure.
Jan 3	comment	Implementing Secure Remote Password with Remote Desktop Application check it out here: srp.stanford.edu/ndss.html
Jan 3	comment	Any real world examples of GPS location data being used with authentication? Mobile phone networks also use a "miles an hour" event if calls are made from the same caller account in a short period of time between two locations. If "miles an hour" is above 1500 then a fraud score is incremented.