1,275 reputation
7
bio website
location Scotland
age
visits member for 5 months
seen May 17 at 15:59
stats profile views 28

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance.


Dec
4
comment How do certification authorities store their private root keys?
I forgot to add that one of our key ceremonies got quite stressful when the transport key would not enter properly. because we couldn't look at what was being typed in by the key holder - we got them to keep on trying in case of input error. Then, lightbulb moment "has the key got an I or the letter O in it?" "yes", which explains the problem because itit was a Hex code!
Dec
4
answered How do certification authorities store their private root keys?
Dec
3
answered Dealing with a (possible) virus on both MacOSX and iOS
Dec
3
comment Detecting and filtering data over AC power lines?
Depends what the local circuit is? I use homeplug at home and that includes about 8 houses on my street. I haven't proven it yet, but I'm pretty sure that the simple passwd system they use is not very strong and easily brute forceable.
Dec
3
answered Sourcing hardware that is least likely to contain backdoors
Nov
29
comment Is there formal guidance that requires all sessions to be logged off when a user changes their password?
it's certainly worth taking this particular use case to OWASP and get them to include it in their top 10 notes.
Nov
29
answered Is hacking back a valid security technique for companies?
Nov
28
answered Is there formal guidance that requires all sessions to be logged off when a user changes their password?
Nov
28
answered Does AV software protect web applications (Twitter, Facebook, etc) from attacks? (CSRF, etc)
Nov
28
answered How to tell what viruses are covered by your anti-virus software
Nov
28
awarded  Supporter
Nov
28
answered VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
Nov
28
answered Discover what workstations a user us connected to in a Windows AD Environment?
Nov
28
awarded  Teacher
Nov
28
answered How to safely synchronize time over Internet?