45,647 reputation
12105191
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 2 years, 9 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Aug
12
answered How do ASLR and DEP work?
Aug
12
comment How “enforcable” are email disclaimers
@HendrikBrummermann One answer per country could be interesting.
Aug
12
answered Why do I get AV alerts when browsing a web page?
Aug
12
answered How “enforcable” are email disclaimers
Aug
12
answered using truecrypt keyfiles with weak passwords
Aug
12
comment For what do I hash user passwords with PDKDF2 when the user data is stored in the same database?
NoSQL injections still exist. In fact, they're probably more prevelant by percentage than SQL injection holes are, since most people don't know anything about them.
Aug
12
answered Is multi-factor authentication supported by any current bios?
Aug
12
comment using truecrypt keyfiles with weak passwords
I'm confused. You seem to have said you disagree with me, then made the same point I did. What?
Aug
11
comment using truecrypt keyfiles with weak passwords
I disagree with the last part. If you're storing the keyfiles in another TrueCrypt volume, it's relatively easy to write forensics heuristics to detect high-entropy files without known headers (e.g. RAR / JPEG) to find the other volume. Then it's just a case of cracking the weak password.
Aug
10
awarded  Nice Answer
Aug
10
comment How much does network security audit and patch work?
This question is too vague - it's unanswerable. How long is a piece of string? We don't know what the salary is like in your country, or state/city. We don't know what other requirements you're expecting. We don't know about other benefits you provide.
Aug
10
answered Why users want to disable cookies?
Aug
10
comment How secure is the SRP that Blizzard uses to protect passwords?
This article makes for interesting reading: opine.me/blizzards-battle-net-hack
Aug
10
comment Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
Sounds good to me.
Aug
10
comment Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
If the app doesn't require network resources, disconnect the machine that is running IE from the network completely.
Aug
10
answered Application of Bayesian network for Web Application Security
Aug
10
comment Why does the password field not show the entered text?
Cannot count the number of times I've shoulder-surfed people's details. Never used them of course, but be aware of your damn surroundings people!
Aug
10
answered Is using a “Red” and a “Green” browser to balance LOB requirements and security a good approach?
Aug
10
comment Is it possible to break captcha?
@drjimbob By this point I'm relatively sure that Andrew is just a neural net with a string generator attached. SELECT * FROM words WHERE meaning ~= subject ORDER BY RAND()
Aug
10
comment Is it more or less secure when an entity shares it's security procedures?
@RoryAlsop That's the idea, anyway ;)