1,687 reputation
110
bio website
location Scotland
age
visits member for 1 year, 4 months
seen Feb 21 at 12:21

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance. My company also provides forensic analysis for the legal community in Scotland.


Jan
21
comment What are HTTP GET/POST flood attacks?
it's rare but I once found the other HTTP request types switched on for a custom J2EE web application. It was a mistake in the way that one of the designers had implemented HttpServlet and had accidently switched it all on.
Jan
17
awarded  Quorum
Jan
17
answered What are HTTP GET/POST flood attacks?
Jan
17
answered Should email verification links be 'time limited' after user registration?
Jan
17
answered Secure internet access while traveling
Jan
16
comment Is an ATM alert system triggered by typing the PIN in reverse a secure solution?
I used the principle "add 1 to the PIN" instead in one application, i.e. 1222, and don't issue 9999.
Jan
16
answered Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML
Jan
15
answered Privacy laws' right-to-amend (and right-to-delete) requests and archived data/backups
Jan
11
comment passwords database - access control and/or synchronization
for additional choice, could also try CyberArk (again, no affiliation)
Jan
11
answered Looking for password manager in company
Jan
11
answered What is Non-Repudiation of content? How can we combat it?
Jan
10
answered Can real end-to-end SSL encryption be made?
Jan
10
comment How do small businesses handle web app security?
FWIW, I'm in the same geographic area and industry as Rory and totally agree. Some large organisations (even in finance) can make a complete mess of IT Security, i.e. "too big and complex" to ensure compliance.
Jan
9
comment Why do some antivirus programs find infections that others miss?
is this the same problem: forum.avast.com/index.php?topic=112481.0
Jan
9
comment Writing malware in java?
check out Dalvik. en.wikipedia.org/wiki/Dalvik_%28software%29
Jan
9
awarded  Citizen Patrol
Jan
9
comment Writing malware in java?
some platforms always have a VM, e.g. Android.
Jan
9
comment Encrypted flash drives
the key benefit (relating to the OP question) of using TrueCrypt is that it is platform independent.
Jan
9
comment Blocking executables at the firewall in the enterprise
wildfire is an optional add on with palo alto firewalls - however, most of the big name firewalls have something similar nowadays.
Jan
8
comment What is the most secure way for two people to communicate?
@tylerl - you'd be surprised just how far sound travels over water and the technology used to detect submarines etc can pick up human chatter in water!