meta user
network profile
| bio | website | scotsts.com |
|---|---|---|
| location | Scotland, United Kingdom | |
| age | 39 | |
| visits | member for | 2 years, 6 months |
| seen | 24 mins ago | |
| stats | profile views | 513 |
I'm an IT Security professional based in Scotland. I've been in IT Security for over 13 years now, with the last eight focusing on penetration testing/ethical hacking.
Currently director at a Scotland based Security Testing consultancy called ScotSTS
|
42m |
answered | How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted? |
|
1d |
answered | Login with a hash. Is this secure enough? |
|
1d |
answered | How to prevent restrict access to a web application to authorized devices only? |
|
1d |
reviewed | Approve suggested edit on How is an ATM secure? |
|
1d |
answered | Isolating Web application hosted on same web server |
|
1d |
comment |
Trying to firewall ports 1863, 5190 So that indicates that the ports are open but that nmap can't identify the service running on them. Did netstat -tunap show anything useful? |
|
1d |
answered | Trying to firewall ports 1863, 5190 |
|
1d |
answered | Application to monitor software activities |
|
2d |
reviewed | Approve suggested edit on Malicious Links that Respond to Browsers but not curl or wget |
|
2d |
reviewed | Reject suggested edit on Which is the most popular one time password based authentication scheme? |
|
2d |
comment |
Plain Text Password Reset Vulnerability @AbsoluteĈµERØ reading that article, two points 1) you're mixing terms I'm talking about one time passwords in the sense that OP used it not in the sense of google authenticator, second whilst that article has a rather inflammatory title, if you read the text of it, it says that google authenticator style OTP is a lot better than any single factor solution (e.g. anything that is just username/password) |
|
2d |
awarded | Enlightened |
|
2d |
awarded | Nice Answer |
|
May 15 |
answered | Plain Text Password Reset Vulnerability |
|
May 15 |
answered | Malicious Links that Respond to Browsers but not curl or wget |
|
May 15 |
answered | Tools to extract code comments from sites? |
|
May 15 |
reviewed | Approve suggested edit on opengl tag wiki |
|
May 15 |
comment |
Security test lab setup Well the idea is that you can probably do it with one physical machine (although more are always useful). You can run (for example) windows + VMWare workstation and then create various VMs for tools and target vulnerable systems. the main restriction on how many you can have running is system memory. with 16GB of RAM I commonly have 3-4 VMs running at the same time without causing a slowdown. |
|
May 15 |
awarded | Nice Answer |
|
May 14 |
answered | Security test lab setup |
