30,181 reputation
754113
bio website raesene.github.io
location Scotland, United Kingdom
age 94
visits member for 4 years, 7 months
seen 10 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


1d
comment Supply chain risks
well if you outsource services to another company, the code developed by the outsourcing company and their IT security practices are a risk to your company. For example if an outsourcing company has poor security practices then if they have an incident, it would affect the security of your data.
1d
answered Supply chain risks
Jul
2
answered Digital Ocean “Droplet” allgedly compromised for trivial, unpublicized website. Should I be worried abouty my own machine?
Jul
1
comment How can I use the free version of Burp to identify input HTTP urls for my site
yeah what you want is (AFAIK) not available in the free version of burp but is available in the paid for version (engagement tools --> analyse site) which comes up with a list of GET/POST requests and the parameters they take. Whilst I don't know that it explictly handles this case if you want a free alternative I'd start with a look at OWASP ZAP if I were you
Jul
1
reviewed Close Thinktecture IdentityServer security review
Jul
1
reviewed Close Padding of 802.11 packet with 0's in libpcap
Jun
29
reviewed Close TeamViewer issue
Jun
27
reviewed Reject phishing tag wiki excerpt
Jun
27
reviewed Reject content-security-policy tag wiki excerpt
Jun
27
answered Is Django's approach to password reset tokens secure?
Jun
27
answered Performing a vulnerability assessment on Windows Tablets?
Jun
24
answered Finance with the multitude of “Secure Browsers”
Jun
24
comment Finance with the multitude of “Secure Browsers”
you might want to be careful with Whitehat Aviator. Not sure on its current status but a couple of months back there were some issues... plus.google.com/+JustinSchuh/posts/69qw9wZVH8z
Jun
24
comment Is there a way to securely store unsalted passwords?
well we'll have to agree to differ here, I can't see a real world attacker bothering with that, when after they've got the main password list, just checking it against a list of common plaintext passwords (e.g. rockyou) would likely produce results far faster than brute-force cracking an scrypt hashed list of passwords with a site-wide salt.
Jun
24
comment Is there a way to securely store unsalted passwords?
heck crack up the work factor on the password list storage (as it only needs to be checked when a user registers or changes password) and it probably isn't massively weaker than the main storage.
Jun
24
comment Is there a way to securely store unsalted passwords?
Why use MD5 when you obviously have access to better storage options? Use a slow function with a site-wide salt, achieves the goal (allows for password checking) and whilst it's slightly weaker than the main storage (site-wide against indivdual salts) the extra you gain from a hint list of common passwords is a marginal gain against just going after the main password list....
Jun
24
comment Is there a way to securely store unsalted passwords?
how would the attacker carry out this attack? Online brute-force even with a smaller password set would hit any sane lockout criteria, offline brute-force means they've got the main password hashes.
Jun
24
comment Is there a way to securely store unsalted passwords?
sure but to carry out that attack the attacker has to have compromised the stored password table, comrpomised the table with the usernames and hashed passwords and then cracked the hashes on the stored password table and checked those passwords against the users actual passwords to crack them.... At that point why would the attacker not just crack the users actual passwords and miss out the middle section?
Jun
23
comment How easy is it to hide adding a file to a git repository
So I've not checked this personally to be certain, but it looks like git-rebase may be usuable to modify commit logs stackoverflow.com/a/4110978/537897 . also the identities that git stores aren't checked server side, anyone with access to the repository can call themselves anything they like when they commit (again AFAIK)
Jun
23
comment Nessus Windows Compliance Check Issue
I'd say your best bet is to ask on the Tenable Nessus support forums for this, they're usually pretty good at coming up with answers.