29,248 reputation
652110
bio website raesene.github.io
location Scotland, United Kingdom
age 94
visits member for 4 years, 5 months
seen 2 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


2h
comment If EMV can't be copied/cloned, how will companies like plastc do it?
if you believe their FAQ plastc.com/faqs they can clone EMV cards, however this seems ... unlikely
2d
comment Solution for Protocol Downgrade Attacks
when you say you "have protocol downgrade attacks" on your server what exactly do you mean? For example have you been given a finding in a security audit? If so, what is the finding you've been given? Also it would help to know what web server you're using.
Apr
16
comment Domain Exploitation
so yeah as @raz says, bit of a broad topic. However if you have a default W2K8 with no additional services, it's unlikely you'll get any easy exploits on it. I'd recommend looking for known vulnerable test systems to practice on rather than starting with what might be a hard target.
Apr
9
comment Can I save passwords in my app securely and retrieve them without asking for a master password?
Platform is really important information for this question. Some OSs' (e.g. iOS) provide native functionality for this, so knowing that would affect the answer quite a bit...
Mar
31
comment Why don't popular web services mask the CVV?
One additional reason for not using password input types over what the answers have mentioned is that in modern browsers you can't disable autocomplete on password fields, so it would get cached in the browser if they did that...
Mar
10
comment How to properly test that an OpenVPN connection is secured?
Sure there are many factors, which is why I'd wouldn't agree that RDP will always be less usuable. sometimes it'll be better, and sometimes worse. Also as you mention, persona preferences for different types of slow-down are relevant
Mar
10
comment How to properly test that an OpenVPN connection is secured?
not sure I'd agree with you there. RDP and other remote technologies tend to be optimized for low bandwidth connections and handle slower connections/increased latency quite well. Obviously video/audio wouldn't be affected but (for example) downloading large amounts of JavaScript to the browser would be faster over RDP as you just see the results and don't actually have to have the downloaded data.
Mar
4
comment How to Allow users to save html in Rails application without affecting security
I think your question has been answered at the one above, sounds like the same scenario.
Mar
1
comment Relationship between CVSS and Risk Level in Nessus output data
AFAIK CVE codes are just handed out sequentially without specific regard to the severity of the issue.
Feb
20
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@AndréDaniel for technical people I'd agree but perhaps the challenge is that ordinary users aren't that aufait enough with technology to feel comfortable re-installing operating systems
Feb
20
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@aki sure government level attackers might be able to get their own certs issued, but here wr're referring to companies doing it for commercial gain and placing users at risk by doing so. Not quite the same scenario
Feb
19
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@AndréDaniel indeed that's a good solution for more technical users, unfortunately I guess not everyone will feel competent to install/configure their own OS/drivers/etc
Feb
19
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
There is also a checker which can be used to check to see if the Superfish CA has been installed on your system. The checker is available at filippo.io/Badfish
Feb
7
comment How is HTTPS/SSL able to hide destination website that one is connecting to?
basically it isn't. With a standard SSL connection, an attacker who can sniff the traffic will be able to see a connection from the client machine to the destination server and from that will be able to know what server IP address is being connected to.
Jan
26
comment How to bypass .Net 4.5 request validation, for an XSS attack?
shurely <input would trip input validation (IIRC it's <[A-Za-z0-9] which trips it... )
Jan
16
comment Which security measures does PyPI and similar third-party software repositories take?
@TerryChia although what's new'ish is those computers being used to run everything from your power meter to your healthcare devices to your banking to your tax payments :)
Jan
16
comment Which security measures does PyPI and similar third-party software repositories take?
@TerryChia and trust the developers own operational security and the security of the people running the repos, and the background of new developers on the project. . .
Dec
30
comment Can SQL injection lead to remote code execution?
@AaronLS worth noting that earlier versions of SQL Server have xp_cmdshell available by default which leads to trivial RCE on apps with SQL Injection. In older tools that's pretty much how it was always done.
Dec
30
comment sqlmap - Dump multiple columns at once?
yep, IIRC you just specify the columns you're interested in with a comma to separate them...
Dec
17
comment Password Encoding/Encryption on ODC connection Strings
based on blogs.msdn.com/b/emeadaxsupport/archive/2010/02/17/… I don't think so. If it was kerberos I think it would state it in the connection string..