176 reputation
7
bio website newspeak.org.uk
location Cambridge, United Kingdom
age 31
visits member for 3 years, 4 months
seen Apr 15 at 15:59

Software Engineer with experience of linux, apache, mysql, postgres, python and django mostly.


Apr
15
comment How reliable is a password strength checker?
@Pacerier Markov chains can store the frequency words are used together, so if you start your password phrase guess with a word you could try the more likely associated words first. That's the fastest I can try to explain what I meant, there are many things describing the concept online if you want to know more.
Aug
21
awarded  Caucus
Nov
1
comment Android security without updates
The fact that they're not providing updates at the same time as pressing people into 18 and 24 month contracts is unreasonable. theunderstatement.com/post/11982112928/… is quite interesting.
Jun
21
comment Is PCI DSS applicable to other solutions than those dealing with payment cards?
The OWASP Top 10's warnings echo your comments about using standards as a starting point. "you may already be vulnerable to something nobody ever thought of before", so security is an ongoing test.
May
27
comment How do you erase a Blackberry without having direct access to the server?
related: security.stackexchange.com/questions/2085/…
May
27
comment Secure Linux Desktop
Are you trying to secure it for your own use or for use by non-technical users?
May
26
awarded  Student
May
26
revised Checking whether a password is derived from previous passwords
fix title grammar
May
26
asked Checking whether a password is derived from previous passwords
May
25
comment Starting with sandbox development
blog.metasploit.com/2010/05/introducing-metasploitable.html Metasploitable is another option for a known insecure VM.
May
25
comment Starting with sandbox development
@Rory Alsop: cuckoobox website says it is open source and links to a git repository.
May
25
comment How to find out that a NIC is in promiscuous mode on a LAN?
It is possible to create a "receive only" network cable, used by someone with their device in promiscuous mode it wouldn't be possible to detect. infosecwriters.com/hhworld/hh9/roc/node3.html
May
25
comment How reliable is a password strength checker?
I wonder if anyone has built a Markov model based brute forcer for pass phrases.
May
24
comment Did someone really plug an iphone in, or are these symptoms of an exploit attempt?
infosecblog.org/2011/01/autorun-attacks-on-ubuntu This link may be interesting to people reading this page.
May
20
comment How do I pick a VPN provider?
"not in the news", they could change their name so age of the company is probably a factor as well.
May
20
awarded  Commentator
May
20
comment Why do some people really hate security via client-side?
+1 for good answer and showing me owasp. Could be useful for explaining threats to less technical people.
May
18
awarded  Editor
May
18
revised Books about Penetration Testing
made list more readable
May
18
comment Why do some people really hate security via client-side?
+1 for "if you don't trust the server". Also if the server knows the hash and you can just log in with the hash, then the hash becomes the password effectively.