1,245 reputation
11033
bio website
location
age
visits member for 3 years, 6 months
seen 1 hour ago

I work as a security analyst. I'm from Australia, although I've recently immigrated to the US and hope to start a small business offering security services.

I have a strong interest and knowledge in different access control models, reading about new exploits and vulnerabilities and digital forensics.


21h
comment What is stored on a banking card and how is it protected?
I would say in the mid 2000's. I know very little about this specific field so I may be way off, but when I was living in the UK and chip and pin cards started to appear, banks were insisting how secure they were to the point people were suspicious of my non chip and pin cards (Australia and the US were not offering them yet). As that was happening I kept seeing news stories and papers being released showing yet another way the chip and pin implementation could be bypassed/was broken etc.
21h
comment What is stored on a banking card and how is it protected?
I guess chip and pins cards are secure now. When they first came out there were so many ways to hack them it wasn't funny, to the point they seemed less secure than a standard magstripe card.
Oct
30
revised Are there any ways to leverage NTLM V2 hashes during a penetration test?
added 37 characters in body; edited title
Oct
30
asked Are there any ways to leverage NTLM V2 hashes during a penetration test?
Oct
23
comment SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?
Very nice answer sir!
Oct
23
accepted SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?
Oct
14
awarded  Popular Question
Oct
6
awarded  Notable Question
Oct
6
awarded  Popular Question
Sep
24
awarded  Autobiographer
Sep
15
awarded  Famous Question
Aug
26
comment Testing XSS - how to validate manually?
It's not a moot point, and the banner on this question is misleading. I am not asking in this question for a browser I can test XSS with, as I already found that with the arguments to chrome, however the XSS was seemingly not working and I wanted to verify it was a false positive, now that I had a browser I can test it. Get it?
Aug
25
comment Testing XSS - how to validate manually?
@SilverlightFox Answer wouldn't be the same, any a same answer is not what determines if a question is a duplicate or not. I've been away for a while and that might have changed, do you have a reference for that policy?
Aug
25
comment What is a good browser for web application pen testing?
That's exactly what I was trying, and what was failing.
Aug
25
accepted What is a good browser for web application pen testing?
Aug
25
comment Testing XSS - how to validate manually?
@SilverlightFox Wow. Not duplicates at all. Again, one is a general question, one is a specific code example. But, OK.
Aug
25
comment Testing XSS - how to validate manually?
@SilverlightFox How in the world is a question with specific code examples a duplicate of a question asking about a browser to test with in general?
Aug
25
asked Testing XSS - how to validate manually?
Aug
25
asked What is a good browser for web application pen testing?
Aug
21
comment Is denying login after incorrect attempts ineffective?
@Jeff-InventorChromeOS the capctha is the difference I think. Care to expand that into an answer?