58,805 reputation
17146240
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 10 months
seen 12 hours ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Apr
24
accepted Maltego transform samples
Apr
24
accepted Internal code-signing certificate on Windows
Apr
24
accepted Alternative to security questions for account recovery when email isn't an option
Apr
24
accepted Potential issues with Kim Dotcom's new proposed “encrypted webmail service”
Apr
24
accepted Is there a public database of mutex names that are associated with malware?
Apr
24
accepted What statistics can be used to identify pseudorandom data?
Apr
24
accepted What's an easy way to perform a man-in-the-middle attack on SSL?
Dec
2
accepted Does nmap limit probes when using time limiting on decoy scans?
Jun
28
accepted How does non-ephemeral Diffie-Hellman key exchange become compromised in SSL when the RSA private key is leaked?
Jun
21
accepted Why do we allow SSL certificates to be replaced before their expiry date, without revokation of others?
Feb
5
accepted Fixing the high-bit problem in PHP's crypt() implementation
Feb
1
accepted What goes into an average incident response process for a corporate network?
Feb
1
accepted Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
Feb
1
accepted Better way to import Win32 APIs from injected shellcode
Feb
1
accepted How can SMS spoofing be detected?
Feb
1
accepted How does OCSP stapling work?
Jan
26
accepted Content hashes to help protect resources being fetched from a CDN
Jan
24
accepted What should I know about SPDY before enabling it?
Jan
24
accepted Is AES-GCM recommended for SSL?
Dec
18
accepted OWASP Top 10 style security guide for implementation in hardware devices