28,965 reputation
652110
bio website raesene.github.io
location Scotland, United Kingdom
age 41
visits member for 4 years, 4 months
seen 10 mins ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


6h
comment Why don't popular web services mask the CVV?
One additional reason for not using password input types over what the answers have mentioned is that in modern browsers you can't disable autocomplete on password fields, so it would get cached in the browser if they did that...
Mar
26
awarded  Enlightened
Mar
26
awarded  Nice Answer
Mar
25
answered Decide to REST API Security
Mar
23
awarded  Nice Answer
Mar
22
answered What are analytics APIs accessing when they run, and how do you block or spoof them?
Mar
22
answered Can serving HTTPS to Internet Explorer on Windows XP be made secure?
Mar
22
answered Which Windows Files Should be Monitored by HIDS?
Mar
13
answered How can I handle user authentication and sessions in my app?
Mar
12
reviewed Approve What are legal/ethical concerns to bear in mind, when hacking websites with open invitations?
Mar
10
comment How to properly test that an OpenVPN connection is secured?
Sure there are many factors, which is why I'd wouldn't agree that RDP will always be less usuable. sometimes it'll be better, and sometimes worse. Also as you mention, persona preferences for different types of slow-down are relevant
Mar
10
comment How to properly test that an OpenVPN connection is secured?
not sure I'd agree with you there. RDP and other remote technologies tend to be optimized for low bandwidth connections and handle slower connections/increased latency quite well. Obviously video/audio wouldn't be affected but (for example) downloading large amounts of JavaScript to the browser would be faster over RDP as you just see the results and don't actually have to have the downloaded data.
Mar
10
answered How to properly test that an OpenVPN connection is secured?
Mar
10
answered uploading photos to cloud from an infected device
Mar
9
reviewed Close Is LTV in a pdf required if it has a trusted timestamp and the Verification Authority is guaranteed to remain active?
Mar
9
answered Question about job interview - Penetration Tester
Mar
9
reviewed Close Is OpenID Connect (OAuth2) appropriate for standard login + social login + single sign on?
Mar
8
answered How to secure sensitive information on cloud from administrator (end-to-end encryption)
Mar
8
answered Need help to define existing web app vulnerability
Mar
5
awarded  Custodian