Reputation
36,203
Next tag badge:
144/100 score
17/20 answers
Badges
7 66 139
Impact
~2.1m people reached

1d
awarded  Popular Question
1d
comment Unknown ports shown on Nmap scan…and other strange behavior
with the nmap scan was your intention to scan your localhost? as that's what scanning 0.0.0.0 will do (although it's more usual to do 127.0.0.1 for that)
2d
awarded  Good Answer
Feb
1
comment how to secure my OS?
I don't think SE Linux does what you think it does, it doesn't really have anything to do with physical access to the system.
Jan
30
answered XSS Vector without < or > symbols or equal sign?
Jan
28
comment What to do if meterpreter get Caught?
Possible duplicate of Metasploit Meterpreter alternatives That Question and answer have some good information about alternatives to meterpreter to handle A-V evasion...
Jan
23
comment Can I get SSL certificates for my OpenPGP key?
the closest you're likely to find to this is either keybase.io (key tied to social media identities and/or ownership of a website) or S/MIME certificates which are issued by a CA
Jan
21
comment Is the BBC’s advice on choosing a password sensible?
I'm going to go against the consensus and disagree that it makes cracking passwords easier. "easier" is a relative term that implies that currently users are choosing good passwords and if they follow this scheme they'll be worse. That's objcectively not true, most users choose passwords which are much more predictable than the ones generated by this scheme. This scheme doesn't provide "good" passwords, but it may provide "better" passwords than the majority of users currently choose...
Jan
19
comment Why is it harder to brute force an iphone than a zip-file?
The answer to your question is here blog.cryptographyengineering.com/2014/10/…
Jan
14
answered Ethics & releasing research with no viable solution
Jan
10
comment Why java.sql.ResultSet.getString is an Information Leakage vulnerability
FWIW it's important to note that I would be very careful before using LAPSE+ for anything, the last release I can see is 2.8.1 from 2011 and the mailing list shows no activity since 2013
Dec
17
comment Are there any statistics about packet filtering to prevent IP spoofing on the internet?
bcp38.info/index.php/Main_Page would likely be a good place to get info about this kind of thing..
Dec
15
answered IBM AppScan false positive
Dec
15
revised Can the contents of a web page be protected from modification
updated spelling and grammar
Dec
15
awarded  webserver
Dec
14
revised Memory Mapped Files and AV
vius --> virus
Dec
14
revised Criteria for Evaluating Static Analysis Tools
clean-up
Dec
14
revised In what scenarios is relying on source IP address as a security control acceptable/unacceptable?
clean-up
Dec
14
revised Secure Development costs
clean-up
Dec
14
revised iOS Encryption Details
clean-up