1,747 reputation
111
bio website
location Scotland
age
visits member for 1 year, 10 months
seen Jun 25 at 8:52

I'm a contract Security Architect based in Scotland, UK. I derive strategy for large organisations as well as provide design mentoring and governance. My company also provides forensic analysis for the legal community in Scotland.


May
23
comment What is the security significance of Keyboard and Touchpad controller chips?
It makes you wonder whether they made a mistake by taking the inverter controller, if so, what were they meant to take?
Jan
6
comment How can I ensure that an android app was installed on a physical device and not an emulator?
be aware that virtualised/emulated Android environments will soon be a real use case for Windows 8.1 users, see arstechnica.com/gadgets/2014/01/…
Nov
20
comment How can I stop this attack on my router?
NB: DoS'ing is very common in multiplayer online gaming.
Nov
13
comment How safe is Money Toolkit?
thanks for contributing! don't be too hard on yourself, the same security model was proposed as the successor to MegaUpload. Having designed a consumer bank authentication system; I think if tools like this were used in larger numbers then it would be stopped by implementing specific T's and C's. Not because yours is bad, but because consumers would accidentally be fooled into using copycats.
Oct
14
comment Is it normal that my new VISA debit card has almost the same number as the old one? Is it secure?
note that the "4" is reserved for the VISA organisation network. Store cards, for example, use another number.
Oct
14
comment Do we need to logout of webapps?
have a look at the Firefox Extension "Firesheep" to learn how easy it is to steal session cookies.
Oct
9
comment How should I store and maintain secure configuration documents?
@Scott - the check and balance is that we run compliance checking tools by another team to try and reduce the risk of an insider attack. However (without leading the witness) I was wondering whether anyone had tried to integrate with vulnerability intelligence feeds etc.
Oct
9
comment How should I store and maintain secure configuration documents?
@Jiri - yes, we save config but we have all sorts of systems including mainframes and all ages of tech.
Aug
29
comment What do I need to be aware of to select a transfer method for digital forensic data?
@Thomas is absolutely right about speed. Carving files is very slow on USB2 and below. USB3 may be acceptable but I've not tried it. I sometimes boot a copy of the disk so I can compare it with another RO copy.
Aug
16
comment Are voluntary / manual DDoS illegal?
@HamZa - the question doesn't say, but this would be perfectly legal if the DDoS was being run inside a test environment within an organisation
Aug
16
comment Atm/Debit card Security
UK ATM's use "shuffle" card entry to help reduce the threat of surface skimmers. The card stutters in and out as the card is entered into the machine. Also, machines here tend to use the chip rather than the mag stripe.
Aug
14
comment Door locks & deadbolt appropriate for exterior office door with decorative glass next to it
or indeed use the principle of layered security and provide better security for the things that lie behind this door. i.e. assume that the door will always be a threat and apply security to the things inside.
Aug
2
comment Why would one increment card security code for a new payment card
The first 6 digits is usually called the Issuer Identification Number, oldies call it the Bank Identification number (BIN). The rest of the number can be used in any way by the bank, but the last digit of the PAN (the big number on the card) is a check digit using the Luhn algorithm.
Jul
26
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
thanks. I've/My company has plenty of forensics and legal experience but mobile, especially iThings are new. Answer has been helpful to convince me to outsource this bit of the job and look at investing in this area in the longer term. thanks!
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
note: clearly there are three ways of imaging an iphone: Zdziarski, jailbreak or using software like IXAM. However, Zdziarski and Jail breaking both alter the phone and the Zdziarski method only gives one access to the user file area. I've not used FTS iXAM before. Therefore, whilst it is easy to write an answer saying "image the phone" - it's actually quite a hard thing to do for later model iPhones and, as far as I can see, they only image of the user file area (which is of little interest to me)
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
I should note that whilst the phones have been used by staff continually, it would be prudent to work from an image and follow (my country) evidence gathering framework otherwise the argument will be destroyed in court. Even if I find a positive evidence it probably won't be used directly, instead we'll go after the spysuite service provider for evidence.
Jul
25
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
The work is pre-trial evidence gathering - however, what I'd be interested in is how to digitally image a phone such as an iphone that can be done at a cost that makes sense for the client.
Jul
24
comment How do I forensically determine whether a mobile phone has been infected with a spy suite?
This answer allows for a non-intrusive "quick check" and allows the phone to operate normally without affecting the evidence. We could ring it, SMS it and so on and look for spurious traffic with a sniffer.
May
15
comment Unsolicited Password Request from Facebook
interestingly, my wife got one of these for the first time on her Android yesterday. The message also included the name and location "Howard from Houston" and asked her "do you know this person?" to which she said no and then she was forced to change her password in the Android app (did not ask for old passwd). The problem is that the user has no cue as to whether it is real or not.
Mar
7
comment How do I get my Encryption Certificate back?
do you know if the user backed up the certificates?