Rory McCune

14,435 reputation

22361

bio	website	scotsts.com
	location	Scotland, United Kingdom
	age	39
visits	member for	2 years, 6 months
	seen	8 hours ago
stats	profile views	518

I'm an IT Security professional based in Scotland. I've been in IT Security for over 13 years now, with the last eight focusing on penetration testing/ethical hacking.

Currently director at a Scotland based Security Testing consultancy called ScotSTS

	14,435 reputation	bio	website	scotsts.com	visits	member for	2 years, 6 months
22361 badges		location	Scotland, United Kingdom		seen	8 hours ago

summary answers questions tags badges favorites bounties reputation activity

579 Actions

suggestions reviews revisions comments badges posts accepts all

14h	answered	Does providing OAuth for mobile apps pose a security threat?
2d	answered	Is a full backup the quickest or the longest on restoring
2d	reviewed	Approve suggested edit on referer tag wiki
2d	reviewed	Approve suggested edit on referer tag wiki excerpt
May 21	comment	Considerations for information exchange agreement between governmental agencies Actually as I wrote that I was thinking perhaps the most useful bit in such an agreement would be a mapping of the security terminology of the two organisations so "when we say securely marked with "secret" this is equivalent to your designation of "s2" ", as I'd say a lot of the problems would come in people not understanding the equivalencies and making assumptions as a result.
May 21	answered	Considerations for information exchange agreement between governmental agencies
May 21	reviewed	Approve suggested edit on What happens when an Intermediate CA is revoked?
May 20	comment	How to find live hosts on my network? one thing that's worth noting is that when you're in the same broadcast domain as the hosts you're scanning, nmap uses ARP instead of ICMP/SYN scanning
May 19	comment	*How can I verify the identity of a US \| UK -based person and prevent fake identities* from being accepted?** @AbsoluteƵERØ yeah that's why for this question I recommended rejecting people who no-score on the Credit check. Loses you customers but helps avoid fraud :) (although you don't just lost "off the grid" people, in the UK they're really slow at adding new estates, so people in new houses get it too)
May 19	answered	*How can I verify the identity of a US \| UK -based person and prevent fake identities* from being accepted?**
May 18	answered	Login with a hash. Is this secure enough?
May 18	answered	How to prevent restrict access to a web application to authorized devices only?
May 17	reviewed	Approve suggested edit on How is an ATM secure?
May 17	answered	Isolating Web application hosted on same web server
May 17	comment	Trying to firewall ports 1863, 5190 So that indicates that the ports are open but that nmap can't identify the service running on them. Did netstat -tunap show anything useful?
May 17	answered	Trying to firewall ports 1863, 5190
May 17	answered	Application to monitor software activities
May 17	reviewed	Approve suggested edit on Malicious Links that Respond to Browsers but not curl or wget
May 17	reviewed	Reject suggested edit on Which is the most popular one time password based authentication scheme?
May 17	comment	Plain Text Password Reset Vulnerability @AbsoluteƵERØ reading that article, two points 1) you're mixing terms I'm talking about one time passwords in the sense that OP used it not in the sense of google authenticator, second whilst that article has a rather inflammatory title, if you read the text of it, it says that google authenticator style OTP is a lot better than any single factor solution (e.g. anything that is just username/password)