14,425 reputation
22361
bio website scotsts.com
location Scotland, United Kingdom
age 39
visits member for 2 years, 6 months
seen 11 mins ago
stats profile views 518

I'm an IT Security professional based in Scotland. I've been in IT Security for over 13 years now, with the last eight focusing on penetration testing/ethical hacking.

Currently director at a Scotland based Security Testing consultancy called ScotSTS


Jul
26
revised Should IP addresses be validated to prevent SQL Injection?
D'oh I was confusing Prepared statements and stored procedures ...
Jul
25
revised Should IP addresses be validated to prevent SQL Injection?
Updating to take account of @Lucb1e's comment on the $_SERVER array
Apr
2
revised Besides OpenVas and Nessus, what are my other options for vulnerability detection?
doh retina is a windows prod
Dec
28
revised Two SSIDs on same Access point- not good?
finished my thought
Nov
27
revised What are the most challenging IT security certifications to obtain?
added bracket
Sep
20
revised Information on the phpMyAdmin probe?
typo
Sep
19
revised Guarding against rogue certificates
previous edit changed sentence to suggest that all certs are hard coded into chrome. AFAIK it's just for googles services
Jul
28
revised How can I reliably erase all information on a hard drive?
updated with additional references and quotes
Jun
6
revised incoming packets in server
formatting use of angle brackets caused text to disapper :)
May
26
revised Secure Development costs
added another reference to a building security in page
May
26
revised Secure Development costs
added reference to informationweek article and Aberdeen group report
May
23
revised What is the best option for setting up a several sites supporting SSL on the same IP?
adding update indicating where a list of supported browsers is available
Mar
1
revised Vulnerable OS's?
added 250 characters in body
Jan
18
revised If someone breaks encryption, how do they know they're successful?
Fixed Typo in title (Successfull to Successful)
Jan
18
revised Is posting from HTTP to HTTPS a bad practice?
Just changing OSASP to OWASP which I think is what was meant
Dec
30
revised What benefits does Nessus have over OpenVAS?
added 652 characters in body; deleted 53 characters in body
Dec
18
revised Are there any decent web app security scanners that can integrate with a build server?
added web-application tag
Nov
13
revised How to securely hash passwords?
added 545 characters in body