23,605 reputation
33591
bio website scotsts.com
location Scotland, United Kingdom
age 40
visits member for 3 years, 5 months
seen yesterday

I'm an IT Security professional based in Scotland. I've been in IT Security for over 13 years now, with the last eight focusing on penetration testing/ethical hacking.

Currently director at a Scotland based Security Testing consultancy called ScotSTS


2d
comment -bash: -sudo: command not found
@thisisjnd no worries, a q. would be which version of linux are you using? If it's fedora based it would be yum that you're looking for rather than apt-get...
2d
comment -bash: -sudo: command not found
This may not be the best site to ask, as it's more a question of unix paths and package management. probably a better fit for unix.stackexchange.com or askubuntu.com
Apr
14
awarded  Popular Question
Apr
12
answered Is there a decentralized version of LastPass?
Apr
10
comment Doesn't the Heart Bleed vulnerability imply that we need to change passwords for *all* systems?
which browsers is it that you think use OpenSSL?
Apr
6
answered Why do we trust organizations that certificate ISO 27001?
Apr
4
awarded  ssl
Apr
2
answered REST security using only API key and SSL
Apr
2
answered Does WiFi SSID spoofing also affect known password protected networks?
Mar
31
comment Is it a real security benefit if a host uses static IP Addresses for authentication?
interesting paper but unless I'm missing something to get a single spoofed connection he's sending out 300,000 packets per second for 8 minutes and that give 1 packet to ACK and do a blind request. Not the most practical for application level attacks like HTTP unless the attacker knows how to attack the system with a single request. all the same a good illustration of my last point which is "don't rely on it on its own"
Mar
30
answered Effectively Pentest a Wordpress Site
Mar
29
comment How do I prove for my client that unused ports are closed and unused services are disabled?
Indeed good point, additionally there are downloadable guides from places like CIS (benchmarks.cisecurity.org/downloads) that often have audit procedures in them
Mar
29
answered How do I prove for my client that unused ports are closed and unused services are disabled?
Mar
27
answered Is it a real security benefit if a host uses static IP Addresses for authentication?
Mar
26
answered Fuzzdb detected as Trojans
Mar
26
answered Can HTTPS or VPN connection be sniffed through UTM device?
Mar
25
awarded  Nice Answer
Mar
23
answered Up to date books for OpenSSL coverage of TLS 1.1 and 1.2
Mar
21
awarded  Nice Answer
Mar
21
comment What are the security features of JRE 8?
This securitycurmudgeon.com/2014/03/20/… contains a pretty good looking summary of Java7/8 security features..