49,793 reputation
14121210
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 26
visits member for 3 years, 2 months
seen 41 mins ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Dec
23
answered How much should I care about the iOS/Android version when pentesting mobile app?
Dec
23
awarded  Good Answer
Dec
22
comment Security concern to implement a web based remote desktop
And at that point you're probably better off using a native Remote Desktop solution like RDP or VNC, over the VPN.
Dec
22
comment If someone asks to borrow your phone to make a call, what could they do?
When I ran into some bad charges on my PAYG phone, it was very difficult to dispute them. It may be easier on contract, but I don't know. It's a YMMV thing. As far as links go, I don't have any atm (I'm using my tablet right now) but I can try to dig some yup later.
Dec
21
comment How does one test AV against zero-day malware?
From the brief and unscientific work I've done on these tests, I'd say one of the most effective ways to test is to write your own malware containing various common and uncommon traits. That way you get the detection without the issues of having the samples spread, or the hassle of honeypotting the real 0day malware.
Dec
21
reviewed Approve passphrase tag wiki
Dec
21
reviewed Approve passphrase tag wiki excerpt
Dec
21
answered Secure login feature with low CPU power
Dec
21
comment How do spammers verify the validity of a huge amount of email addresses?
@JohnU Except most email clients don't show images by default for exactly that reason.
Dec
21
awarded  Nice Answer
Dec
21
answered Reasonable computationally lightweight security?
Dec
21
comment How do spammers verify the validity of a huge amount of email addresses?
@wenzi Yes, sorry, my answer does kinda side-track a little. I figured you were interested in how it's done in various situations.
Dec
21
comment How do I choose whether to trust a particular website?
The term "gut feeling" is an interesting choice. It's commonly used to refer to a purely intuitive analysis of trustworthiness, but in reality you're really drawing on a wide range of subconscious experience in deciding whether or not to trust someone or something. So, when you rely on a "gut feeling", you're actually relying on years of personal and professional experience in dealing with technology. Other people may not have this experience, so their "gut feeling" is likely to be significantly less accurate than yours.
Dec
21
answered How do spammers verify the validity of a huge amount of email addresses?
Dec
21
comment If someone asks to borrow your phone to make a call, what could they do?
I highly doubt a terrorist would borrow someone else's phone, leaving their DNA and fingerprints all over the device, and have a member of the public see their face. Especially when you can buy a cheap pay-as-you-go phone, top it up with cash, use it once, then throw it in a river.
Dec
21
reviewed Reject whitebox tag wiki excerpt
Dec
21
reviewed Reject instant-messaging tag wiki excerpt
Dec
21
reviewed Reject selinux tag wiki excerpt
Dec
21
reviewed Reject wordpress tag wiki excerpt
Dec
21
reviewed Reject pbkdf2 tag wiki excerpt