1,777 reputation
111
bio website
location Scotland
age
visits member for 1 year, 11 months
seen Oct 27 at 10:09

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance. My company also provides forensic analysis for the legal community in Scotland.


Jan
9
awarded  Citizen Patrol
Jan
9
comment Writing malware in java?
some platforms always have a VM, e.g. Android.
Jan
9
comment Encrypted flash drives
the key benefit (relating to the OP question) of using TrueCrypt is that it is platform independent.
Jan
9
comment Blocking executables at the firewall in the enterprise
wildfire is an optional add on with palo alto firewalls - however, most of the big name firewalls have something similar nowadays.
Jan
8
comment What is the most secure way for two people to communicate?
@tylerl - you'd be surprised just how far sound travels over water and the technology used to detect submarines etc can pick up human chatter in water!
Jan
8
answered How to explain computer security to low-grade students?
Jan
8
comment What Checkstyle or Findbugs rules detect common vulnerabilities?
it's worth mentioning that one of the key advantages of code analysers (like findbugs etc)n is that they can detect issues as the code is being entered by the developer and at "build". Veracode (etc) are really only good for analysing code on release - which is often quite far down the development path.
Jan
8
answered What Checkstyle or Findbugs rules detect common vulnerabilities?
Jan
7
answered Blocking executables at the firewall in the enterprise
Jan
7
answered Why would someone want to encrypt RSS feeds?
Jan
7
comment Slot machine segfault: what can we determine?
looks like the network cable has fallen out and it requires network before proceeding. I imagine a lot of modern gaming machines work like that nowadays.
Jan
4
comment How to Investigate Wi-Fi Intrusion and where to look for evidence?
absolutely, but the OP should be aware that MAC address filtering shouldn't be the only security measure because whilst MAC addresses are meant to be only set by the chip manufacturer; nowadays they can be changed by attackers.
Jan
4
answered How to Investigate Wi-Fi Intrusion and where to look for evidence?
Jan
3
awarded  Critic
Jan
3
comment Youtube & Google Services that ID you based on stuff on your computer - what is the risk?
a signed Java Applet can do pretty much anything. unsigned applets live inside the sandbox. If it was signed you could probably work out whether the network connection is using MAC addresses from popular WiFi chipmakers but I've not tried it so can't be totally sure.
Jan
3
comment Implementing Secure Remote Password with Remote Desktop Application
check it out here: srp.stanford.edu/ndss.html
Jan
3
comment Any real world examples of GPS location data being used with authentication?
Mobile phone networks also use a "miles an hour" event if calls are made from the same caller account in a short period of time between two locations. If "miles an hour" is above 1500 then a fraud score is incremented.
Dec
21
comment Reasonable computationally lightweight security?
TLS is easy on CPU most of the time - but the connection process is very hard on CPUs where there is no client side certificate. So if the system has lots of single request SSL connections then the CPU will have a tough time coping. (*depends on what "a lot" is in the context of this question)
Dec
21
answered Secure login feature with low CPU power
Dec
19
awarded  Editor