2,048 reputation
3822
bio website
location United Kingdom
age
visits member for 1 year, 9 months
seen Sep 9 at 10:08

Sep
11
comment Running arp command on public wifi network
@user30673 I feel you fear, and I believe you do well in asking. It is good to know that more people are becoming security-aware.
Sep
11
comment Running arp command on public wifi network
@user30673 My pleasure. That is interesting... I never experience such a delay. I guess depending on your machine's speed and the amount of entries on the cache this could create a slight delay, depending on how long it took you to kill the process. Nothing stops you from flushing the cache and have a new list being built from the scratch. The way to do this depends on your Operating System, though.
Sep
11
answered Running arp command on public wifi network
Sep
6
answered How to find vulnerable sites on a web server
Sep
4
revised Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field
deleted 1 characters in body
Aug
7
comment Does adding a non-entropic part to a password makes it less secure?
So is there anything that can calculate the entropy? For example, how can I know if a password like '=+*/-$' is stronger/weaker than 'thisismypassowrdIbetyoucantcrackit'?
Aug
7
comment Implementing 'Remember Me' for a mobile application
That was excellent (+1). Out of sheer curiosity, may I just ask: "Javascript is not at all the right language for that". Which language is it then, if any at all?
Aug
6
awarded  Informed
Aug
5
comment Custom web authentication scheme
"[...] if you have SSL, then Basic authentication (aka "show the password") is fine.": on a SSL MITM, would the credentials of a genuine user not run the risk of being intercepted and replayed (having in mind that apparently the majority of users ignore the certificate error and click on anyway)?
Jul
22
comment WAF Process Creation for Integration of IT and Business
thank you so much for sharing your view. You have given me a lot of information. What you said that the "first breakout should be organization or discipline related" makes a lot of sense and I am definitely taking this one with me. Also the "unknown process" is gold - thanks for that. Keeping the document as dynamic as possible ("living document") was something I had not considered either: very interesting. Above all, I am very grateful for what you said about known attackers and vulnerabilities: much broader view that the one I had. Definitely a +1. Thanks again.
Jul
22
revised WAF Process Creation for Integration of IT and Business
semantics
Jul
22
asked WAF Process Creation for Integration of IT and Business
Jul
21
awarded  Favorite Question
Jul
16
comment Stealing WiFi Internet connection
@Tom You have not provided details on the e-mail you got, but have you considered the possibility that the e-mail might be a phishing attempt from the intruder him/herself? If he is within your network, he might well have found out your e-mail address by gathering smaller details that go unencrypted.
Jul
15
revised PCI compliance simple questions
added 3 characters in body
Jul
13
awarded  Announcer
Jul
12
comment Touch Screen Password Guessing by Fingerprint Trace
@Frank B Hmmm, I have no idea why he decided to change it. Although he stripped off my clumsy syntax and charming semantic foreignism, I must admit: it is better.
Jul
12
comment Windows groups and permissions: Authenticated Users group meaning
so you have a very good question here. Definitely a +1.
Jul
12
comment Windows groups and permissions: Authenticated Users group meaning
what if you create a new group, such as caesar for instance, and add mike to that group, would it show as output of the net command then?
Jul
12
comment Windows groups and permissions: Authenticated Users group meaning
Excuse my ignorance, but why can't the command net know that mike also belongs to another group? The plural in "Local Group Memberships" makes me think it should be able to see all groups to which mike belong.