30,131 reputation
754113
bio website raesene.github.io
location Scotland, United Kingdom
age 94
visits member for 4 years, 7 months
seen 8 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


Jun
26
comment With regards to performance, which one is better CMPV2 or SCEP?
You might want to provide a bit more detail in your question, if you're hoping for a decent answer. something about what purpose you're looking to use these protocols for, the application your building, that sort of thing, otherwise a definition of "better" might be hard to state.
Jun
24
comment Finance with the multitude of “Secure Browsers”
you might want to be careful with Whitehat Aviator. Not sure on its current status but a couple of months back there were some issues... plus.google.com/+JustinSchuh/posts/69qw9wZVH8z
Jun
24
comment Is there a way to securely store unsalted passwords?
well we'll have to agree to differ here, I can't see a real world attacker bothering with that, when after they've got the main password list, just checking it against a list of common plaintext passwords (e.g. rockyou) would likely produce results far faster than brute-force cracking an scrypt hashed list of passwords with a site-wide salt.
Jun
24
comment Is there a way to securely store unsalted passwords?
heck crack up the work factor on the password list storage (as it only needs to be checked when a user registers or changes password) and it probably isn't massively weaker than the main storage.
Jun
24
comment Is there a way to securely store unsalted passwords?
Why use MD5 when you obviously have access to better storage options? Use a slow function with a site-wide salt, achieves the goal (allows for password checking) and whilst it's slightly weaker than the main storage (site-wide against indivdual salts) the extra you gain from a hint list of common passwords is a marginal gain against just going after the main password list....
Jun
24
comment Is there a way to securely store unsalted passwords?
how would the attacker carry out this attack? Online brute-force even with a smaller password set would hit any sane lockout criteria, offline brute-force means they've got the main password hashes.
Jun
24
comment Is there a way to securely store unsalted passwords?
sure but to carry out that attack the attacker has to have compromised the stored password table, comrpomised the table with the usernames and hashed passwords and then cracked the hashes on the stored password table and checked those passwords against the users actual passwords to crack them.... At that point why would the attacker not just crack the users actual passwords and miss out the middle section?
Jun
23
comment How easy is it to hide adding a file to a git repository
So I've not checked this personally to be certain, but it looks like git-rebase may be usuable to modify commit logs stackoverflow.com/a/4110978/537897 . also the identities that git stores aren't checked server side, anyone with access to the repository can call themselves anything they like when they commit (again AFAIK)
Jun
23
comment Nessus Windows Compliance Check Issue
I'd say your best bet is to ask on the Tenable Nessus support forums for this, they're usually pretty good at coming up with answers.
Jun
23
comment My Virgin Media account password is visible in plaintext to call center staff. What do I do?
Yeah this is a relatively well known issue with Virgin Media (twitter discussion here twitter.com/virginmedia/status/595135419152474112 hacker news thread news.ycombinator.com/item?id=9492006 ) from that it appears that it's not the login password, but still not great. that said as @gowenfawr mentions you should make sure that the password isn't the same as ones you use elsewhere..
Jun
21
comment Does verifying identity by positions in passwords mean passwords are stored unhashed?
So there's an existing question on this security.stackexchange.com/questions/4830/… . One thing that the answers below haven't (AFAICS) covered is that it is possible to store passwords in a reversibly encrypted format securely, via the use of a Hardware Security Module (HSM), and this is relatively common practice in the banking industry (in the UK at least).
Jun
19
comment How to check randomness of a hash?
cool. if you script them to a file you can load that into burp as well, so that's another option...
Jun
16
comment Assuming proper creation, encryption, and storage, how is a breach/leak of a hash worriesome?
@MikeOunsworth I think that OP is likely thinking of online password managers (although it's not explicitly mentioned), in light of the recent Lastpass hack.
Jun
15
comment Which factors should you take into account when deciding whether users should be informed of a penetration test?
ahh, that's not hugely clear from your answer, by starting with HRA I took it to indicate that you think that would commonly apply, when it seems from comments that the consensus is that it won't usually apply
Jun
15
comment Which factors should you take into account when deciding whether users should be informed of a penetration test?
I'd agree with @paj28 on this (although IANAL), in the UK there is usually either a "no personal use" clause in IT security policy or a specific caveat that personal data will be processed by the organisation for business purposes, so this would not apply.
Jun
12
comment My ISP is injecting a swf into my webpage. How legal is this?
You're may not get a definite answer to a legal question like this, but you're really unlikely to get it if you don't mention what country you live in :)
Jun
10
comment How can hackers guess passwords (using dictionary attack or brute force) without being locked out?
Another option which is common and you don't mention, is if you used the same password on another site, if that site is compromised, your Yahoo account could be compromised. Try putting the e-mail address associated with the account into haveibeenpwned.com
Jun
5
comment distributing SSL certificates?
I think your question might benefit from a bit more background on why you've been tasking with installing an SSL certificate on every machine in your network (i.e. what business problem is being solved by doing this) as it may be that there's other ways to accomplish the goal with less hassle, but it's hard to tell if those will be appropriate without knowing the underlying reasons for the deployment.
May
8
comment Is it safe to trust a Docker container?
well stealing credentials (username/password) doesn't provide necesarily the same level of compromise as stealing signing keys. Ideally signing keys should be held offline and use to sign releases. this increases the trust you can place in the software you receive.
May
8
comment Is it safe to trust a Docker container?
no worries, they're similar meaning/sounding terms so easy to mix up..