Reputation
1,897
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
3 12
Newest
 Yearling
Impact
~173k people reached

  • 0 posts edited
  • 1 helpful flag
  • 81 votes cast
Jan
10
comment How do small businesses handle web app security?
FWIW, I'm in the same geographic area and industry as Rory and totally agree. Some large organisations (even in finance) can make a complete mess of IT Security, i.e. "too big and complex" to ensure compliance.
Jan
9
comment Why do some antivirus programs find infections that others miss?
is this the same problem: forum.avast.com/index.php?topic=112481.0
Jan
9
comment Writing malware in java?
check out Dalvik. en.wikipedia.org/wiki/Dalvik_%28software%29
Jan
9
awarded  Citizen Patrol
Jan
9
comment Writing malware in java?
some platforms always have a VM, e.g. Android.
Jan
9
comment Encrypted flash drives
the key benefit (relating to the OP question) of using TrueCrypt is that it is platform independent.
Jan
9
comment Blocking executables at the firewall in the enterprise
wildfire is an optional add on with palo alto firewalls - however, most of the big name firewalls have something similar nowadays.
Jan
8
comment What is the most secure way for two people to communicate?
@tylerl - you'd be surprised just how far sound travels over water and the technology used to detect submarines etc can pick up human chatter in water!
Jan
8
answered How to explain computer security to low-grade students?
Jan
8
comment What Checkstyle or Findbugs rules detect common vulnerabilities?
it's worth mentioning that one of the key advantages of code analysers (like findbugs etc)n is that they can detect issues as the code is being entered by the developer and at "build". Veracode (etc) are really only good for analysing code on release - which is often quite far down the development path.
Jan
8
answered What Checkstyle or Findbugs rules detect common vulnerabilities?
Jan
7
answered Blocking executables at the firewall in the enterprise
Jan
7
answered Why would someone want to encrypt RSS feeds?
Jan
7
comment Slot machine segfault: what can we determine?
looks like the network cable has fallen out and it requires network before proceeding. I imagine a lot of modern gaming machines work like that nowadays.
Jan
4
comment How to Investigate Wi-Fi Intrusion and where to look for evidence?
absolutely, but the OP should be aware that MAC address filtering shouldn't be the only security measure because whilst MAC addresses are meant to be only set by the chip manufacturer; nowadays they can be changed by attackers.
Jan
4
answered How to Investigate Wi-Fi Intrusion and where to look for evidence?
Jan
3
awarded  Critic
Jan
3
comment Youtube & Google Services that ID you based on stuff on your computer - what is the risk?
a signed Java Applet can do pretty much anything. unsigned applets live inside the sandbox. If it was signed you could probably work out whether the network connection is using MAC addresses from popular WiFi chipmakers but I've not tried it so can't be totally sure.
Jan
3
comment Implementing Secure Remote Password with Remote Desktop Application
check it out here: srp.stanford.edu/ndss.html
Jan
3
comment Any real world examples of GPS location data being used with authentication?
Mobile phone networks also use a "miles an hour" event if calls are made from the same caller account in a short period of time between two locations. If "miles an hour" is above 1500 then a fraud score is incremented.