29,676 reputation
753111
bio website raesene.github.io
location Scotland, United Kingdom
age 94
visits member for 4 years, 6 months
seen 2 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


May
8
comment Is it safe to trust a Docker container?
well stealing credentials (username/password) doesn't provide necesarily the same level of compromise as stealing signing keys. Ideally signing keys should be held offline and use to sign releases. this increases the trust you can place in the software you receive.
May
8
comment Is it safe to trust a Docker container?
no worries, they're similar meaning/sounding terms so easy to mix up..
May
8
comment Is it safe to trust a Docker container?
if you see my edit above, the docker people themselves state that container signing isn't in place as yet, so I think that's also the meaning they're looking at...
May
8
comment Is it safe to trust a Docker container?
direct modification of the git repos wasn't I think an issue there, but that doesn't mean you can rely on software from github, if someone steals the creds of a developer they can just push a new version to the repository. crypto signing of a release helps to mitigate that risk and ensure you're getting the software you intend.
May
8
comment Is it safe to trust a Docker container?
I think you might be confusing integrity signing with cryptographic signing. Git does provide integrity checks to prevent corruption, but it does not provide cryptographic signing of a release to prevent tampering.
Apr
26
comment If EMV can't be copied/cloned, how will companies like plastc do it?
if you believe their FAQ plastc.com/faqs they can clone EMV cards, however this seems ... unlikely
Apr
24
comment Solution for Protocol Downgrade Attacks
when you say you "have protocol downgrade attacks" on your server what exactly do you mean? For example have you been given a finding in a security audit? If so, what is the finding you've been given? Also it would help to know what web server you're using.
Apr
16
comment Domain Exploitation
so yeah as @raz says, bit of a broad topic. However if you have a default W2K8 with no additional services, it's unlikely you'll get any easy exploits on it. I'd recommend looking for known vulnerable test systems to practice on rather than starting with what might be a hard target.
Apr
9
comment Can I save passwords in my app securely and retrieve them without asking for a master password?
Platform is really important information for this question. Some OSs' (e.g. iOS) provide native functionality for this, so knowing that would affect the answer quite a bit...
Mar
31
comment Why don't popular web services mask the CVV?
One additional reason for not using password input types over what the answers have mentioned is that in modern browsers you can't disable autocomplete on password fields, so it would get cached in the browser if they did that...
Mar
10
comment How to properly test that an OpenVPN connection is secured?
Sure there are many factors, which is why I'd wouldn't agree that RDP will always be less usuable. sometimes it'll be better, and sometimes worse. Also as you mention, persona preferences for different types of slow-down are relevant
Mar
10
comment How to properly test that an OpenVPN connection is secured?
not sure I'd agree with you there. RDP and other remote technologies tend to be optimized for low bandwidth connections and handle slower connections/increased latency quite well. Obviously video/audio wouldn't be affected but (for example) downloading large amounts of JavaScript to the browser would be faster over RDP as you just see the results and don't actually have to have the downloaded data.
Mar
4
comment How to Allow users to save html in Rails application without affecting security
I think your question has been answered at the one above, sounds like the same scenario.
Mar
1
comment Relationship between CVSS and Risk Level in Nessus output data
AFAIK CVE codes are just handed out sequentially without specific regard to the severity of the issue.
Feb
20
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@AndréDaniel for technical people I'd agree but perhaps the challenge is that ordinary users aren't that aufait enough with technology to feel comfortable re-installing operating systems
Feb
20
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@aki sure government level attackers might be able to get their own certs issued, but here wr're referring to companies doing it for commercial gain and placing users at risk by doing so. Not quite the same scenario
Feb
19
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@AndréDaniel indeed that's a good solution for more technical users, unfortunately I guess not everyone will feel competent to install/configure their own OS/drivers/etc
Feb
19
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
There is also a checker which can be used to check to see if the Superfish CA has been installed on your system. The checker is available at filippo.io/Badfish
Feb
7
comment How is HTTPS/SSL able to hide destination website that one is connecting to?
basically it isn't. With a standard SSL connection, an attacker who can sniff the traffic will be able to see a connection from the client machine to the destination server and from that will be able to know what server IP address is being connected to.
Jan
26
comment How to bypass .Net 4.5 request validation, for an XSS attack?
shurely <input would trip input validation (IIRC it's <[A-Za-z0-9] which trips it... )