network profile
| bio | website | newspeak.org.uk |
|---|---|---|
| location | Cambridge, United Kingdom | |
| age | 29 | |
| visits | member for | 2 years |
| seen | Apr 30 at 13:44 | |
| stats | profile views | 23 |
Software Engineer with experience of linux, apache, mysql, postgres, python and django mostly.
|
Aug 21 |
awarded | Caucus |
|
Nov 1 |
comment |
Android security without updates The fact that they're not providing updates at the same time as pressing people into 18 and 24 month contracts is unreasonable. theunderstatement.com/post/11982112928/… is quite interesting. |
|
Jun 21 |
comment |
Is PCI DSS applicable to other solutions than those dealing with payment cards? The OWASP Top 10's warnings echo your comments about using standards as a starting point. "you may already be vulnerable to something nobody ever thought of before", so security is an ongoing test. |
|
May 27 |
comment |
How do you erase a Blackberry without having direct access to the server? related: security.stackexchange.com/questions/2085/… |
|
May 27 |
comment |
Secure Linux Desktop Are you trying to secure it for your own use or for use by non-technical users? |
|
May 26 |
awarded | Student |
|
May 26 |
revised |
Checking whether a password is derived from previous passwords fix title grammar |
|
May 26 |
asked | Checking whether a password is derived from previous passwords |
|
May 25 |
comment |
Starting with sandbox development blog.metasploit.com/2010/05/introducing-metasploitable.html Metasploitable is another option for a known insecure VM. |
|
May 25 |
comment |
Starting with sandbox development @Rory Alsop: cuckoobox website says it is open source and links to a git repository. |
|
May 25 |
comment |
How to find out that a NIC is in promiscuous mode on a LAN? It is possible to create a "receive only" network cable, used by someone with their device in promiscuous mode it wouldn't be possible to detect. infosecwriters.com/hhworld/hh9/roc/node3.html |
|
May 25 |
comment |
How reliable is a password strength checker? I wonder if anyone has built a Markov model based brute forcer for pass phrases. |
|
May 24 |
comment |
Did someone really plug an iphone in, or are these symptoms of an exploit attempt? infosecblog.org/2011/01/autorun-attacks-on-ubuntu This link may be interesting to people reading this page. |
|
May 20 |
comment |
How do I pick a VPN provider? "not in the news", they could change their name so age of the company is probably a factor as well. |
|
May 20 |
awarded | Commentator |
|
May 20 |
comment |
Why do some people really hate security via client-side? +1 for good answer and showing me owasp. Could be useful for explaining threats to less technical people. |
|
May 18 |
awarded | Editor |
|
May 18 |
revised |
Books about Penetration Testing made list more readable |
|
May 18 |
comment |
Why do some people really hate security via client-side? +1 for "if you don't trust the server". Also if the server knows the hash and you can just log in with the hash, then the hash becomes the password effectively. |
|
May 18 |
awarded | Teacher |
