Reputation
Next tag badge:
99/100 score
20/20 answers
Badges
7 63 128
Newest
 Nice Answer
Impact
~1.7m people reached

1d
awarded  Nice Answer
2d
awarded  Nice Question
Aug
31
comment What are the privacy and security implications of Windows Telemetry
@Polynomial yeah I'd agree disabling telemtry would seem like an idea, although if it's done in an unsupported fashion (i.e. the OS doesn't recognise that as an option) there's always the risk that it'll just get re-enabled in a later update.
Aug
31
comment What are the privacy and security implications of Windows Telemetry
Thanks for the answer. Is this information specific to the telemetry service or just general information that Windows collects? I've had problems in tying up what's telemetry (which was back-ported to win8/7) and what's general data passed back to MS.
Aug
31
comment What are the privacy and security implications of Windows Telemetry
@AndréBorie the general reporting I've seen on this says that windows 7/8/8.1 now have telemetry enabled (e.g. forbes.com/sites/gordonkelly/2015/08/30/…) One of the problems is I don't see any information about whether I should actually be concerned about telemetry from a privacy standpoint. I'm not sure if it's anything to be concerned about or not (hence the question)
Aug
31
asked What are the privacy and security implications of Windows Telemetry
Aug
30
answered Use of Nmap ssl/http md5 and SHA1 hashes
Aug
30
reviewed Approve Use of Nmap ssl/http md5 and SHA1 hashes
Aug
29
comment Is always using HTTPS a good idea?
the reason is that once the user has logged in, if you revert to an unencrypted connection, the session token will be sent over the Internet in a clear text format, which could allow it to be intercepted. As the session token is essentially as good as the password for the duration of the session, this is a bad idea.
Aug
29
answered Is always using HTTPS a good idea?
Aug
28
reviewed Leave Open Virtual phone number
Aug
28
reviewed Close Is it possible to create multiple hidden volumes within an encrypted volume?
Aug
28
reviewed Leave Open Are there any pen testing tools/methods for wpa2 networks that don't require using an adapter that supports monitor mode?
Aug
22
comment Why not create your own encryption?
there's a whole field of study dedicated to analysing and defeating unknown encryption algorithms, it's called cryptanalysis en.wikipedia.org/wiki/Cryptanalysis
Aug
22
comment Why not create your own encryption?
This question already has a good set of answers here security.stackexchange.com/questions/2202/… but basically the answer is that designing encryption algorithms is hard and you are very likely to do it badly. Even experienced well funded people make mistakes with crypto
Aug
22
answered What impact are you expecting Windows 10 Forced Updates to have on your Penetration Testing?
Aug
21
comment OWASP A9 - Maintain the latest security patch level for third party libraries and software
Unfortunately I don't think this question is answerable in the scope of the site. Product recommendations are off-scope (they are ontpic at thttp://softwarerecs.stackexchange.com/) and any other answer would be a generic (find what libraries you have and use a tool to check for available patches)
Aug
20
awarded  Nice Answer
Aug
20
awarded  Good Answer
Aug
20
awarded  Enlightened