25,890 reputation
44398
bio website raesene.github.io
location Scotland, United Kingdom
age 40
visits member for 3 years, 10 months
seen 2 days ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


4h
awarded  Good Question
Sep
11
reviewed Close rolling code & keyless entry system
Sep
11
reviewed Close Is there any way possible that a Digital certificate is issued by admin on wireless channel?
Sep
11
reviewed Close Recommendations for a Certificate Management tool for Linux
Sep
11
reviewed Leave Open How to use a found USB key safely
Sep
11
reviewed Leave Open Self-signed certs /keys stopped working with Thunderbird upgrade
Sep
11
reviewed Leave Open Replacing subkeys.
Sep
11
reviewed Leave Open Vulnerability exploitation in Java
Sep
11
reviewed Close blocking certain websites, when accessing through “proxy”
Sep
11
reviewed Close Utility to hide several encrypted messages in single file
Sep
11
reviewed Close Good tools for reverse engineering colaboratively?
Sep
10
answered Best practices for HSM's used by test and production systems
Sep
8
awarded  Fanatic
Sep
4
awarded  Nice Answer
Sep
2
answered Can an unlisted directory on webserver be discovered?
Aug
22
comment How to disable x-oracle-dms-ecid cookie
I'm afraid I don't know how you'd change it. As to whether it's a security issue, I'd say that depends. the name provides a bit of information about the tech. the site is based on to an attacker (clearly identifies that it's an Oracle product probably their dynamic monitoring service), so I'd generally rate this as a "low" or "informational" finding. If your site is super-high security it might be worth addressing but in most cases I wouldn't do it unless it was an easy/low risk change.
Aug
22
answered Location Obfusication and Email/remote login
Aug
22
answered How trustable is third party root certificates?
Aug
18
comment How sqlmap tests/injections are seen by the victim?
Sure, so to track someone back by their IP you'd need either to be law enforcement (you'd provide an IP to the ISP and ask which of their subscribers had that address at a given point in time, which could correlate to a specific person or at least customer account of the ISP) or alternatively you might be able to correlate it yourself with an online identity but that would be tricky and require you to have some idea of who you were looking for...
Aug
15
answered How sqlmap tests/injections are seen by the victim?