1,777 reputation
211
bio website
location Scotland
age
visits member for 2 years
seen Nov 28 at 16:37

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance. My company also provides forensic analysis for the legal community in Scotland.


Jan
28
comment Due to which reason might a windows 7 password been reset to empty?
one more question: do you have any password policies in force that would normally prevent an empty password? (just trying to work out whether this is user error or indeed something quite new and interesting)
Jan
28
comment Due to which reason might a windows 7 password been reset to empty?
is this a local account or on an Active Directory?
Jan
23
comment Is there a true alternative to using CAPTCHA images?
if the arithmetic was in plain text then a reader would indeed help. However, if an arithmetical challenge would be a lot easier to interpret. It really depends what the risk appetite is and what the end goal of the CAPTCHA is.
Jan
23
answered Is there a true alternative to using CAPTCHA images?
Jan
22
answered Foolproof Jailbreak detection?
Jan
22
answered How secure is the new Mega-site encryption?
Jan
21
comment What are HTTP GET/POST flood attacks?
it's rare but I once found the other HTTP request types switched on for a custom J2EE web application. It was a mistake in the way that one of the designers had implemented HttpServlet and had accidently switched it all on.
Jan
17
awarded  Quorum
Jan
17
answered What are HTTP GET/POST flood attacks?
Jan
17
answered Should email verification links be 'time limited' after user registration?
Jan
17
answered Secure internet access while traveling
Jan
16
comment Is an ATM alert system triggered by typing the PIN in reverse a secure solution?
I used the principle "add 1 to the PIN" instead in one application, i.e. 1222, and don't issue 9999.
Jan
16
answered Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML
Jan
15
answered Privacy laws' right-to-amend (and right-to-delete) requests and archived data/backups
Jan
11
comment passwords database - access control and/or synchronization
for additional choice, could also try CyberArk (again, no affiliation)
Jan
11
answered Looking for password manager in company
Jan
11
answered What is Non-Repudiation of content? How can we combat it?
Jan
10
answered Can real end-to-end SSL encryption be made?
Jan
10
comment How do small businesses handle web app security?
FWIW, I'm in the same geographic area and industry as Rory and totally agree. Some large organisations (even in finance) can make a complete mess of IT Security, i.e. "too big and complex" to ensure compliance.
Jan
9
comment Why do some antivirus programs find infections that others miss?
is this the same problem: forum.avast.com/index.php?topic=112481.0