25,759 reputation
34297
bio website raesene.github.io
location Scotland, United Kingdom
age 40
visits member for 3 years, 9 months
seen 17 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


Apr
20
revised Can robots.txt for your face be made effective?
typo being --> begin
Apr
9
revised How can I protect my internet-connected devices from discovery by Shodan?
added section on the Internet census project
Apr
4
revised I have a client that is worried about DDOS attacks on their site, and they want penetration testing. Will that help?
updated to reflect that in some cases DDoS attacks may be handleable at the ISP level.
Jan
25
revised What should a security audit report include?
Added points from comments around summaries and finding details
Jan
24
revised What should a security audit report include?
typos
Dec
20
revised How can I explain SQL injection without technical jargon?
typo
Dec
7
revised Is WordPress a security vulnerability inside a corporate intranet?
unsafer probably isn't a word
Dec
4
revised How can I reliably erase all information on a hard drive?
Added link to answer on the skeptics site with additional resources on single pass wipes
Nov
28
revised VP of IT claims he unhashed 100% of all 16k employees' PWs. Is he lying to us?
added a comma per Kaz's comment
Nov
5
revised Should we force user to HTTPS on website?
typo
Oct
26
revised Why not use a private CA?
typo
Oct
23
revised What's the impact of disclosing the front-face of a credit or debit card?
added a twitter account courtesy of @polynomial
Oct
23
revised What's the impact of disclosing the front-face of a credit or debit card?
missing bracket
Oct
16
revised Is it good practice to manually lock down ports on each host
typo threads --> threats
Oct
8
revised Can anyone suggest good open source tools for scanning source code for vulnerabilities?
Updated the link to RATS as the fortify domain name appears dead now and just redirects to the HP security frontpage
Oct
8
revised Defending against rogue access points
added para on WPA-PSK to address comment
Oct
4
revised What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?
rouge --> rogue
Sep
3
revised Why is tunneling so important in pen testing?
deleted 1 characters in body
Jul
31
revised How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?
added 10 characters in body
Jul
26
revised Should IP addresses be validated to prevent SQL Injection?
D'oh I was confusing Prepared statements and stored procedures ...