53,827 reputation
17130221
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 6 months
seen 2 days ago

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Jan
13
awarded  Nice Question
Jan
13
revised How traceable is ATM and point-of-sale credit card use back to you in practice?
links
Jan
13
comment How traceable is ATM and point-of-sale credit card use back to you in practice?
Two line breaks make a line break.
Jan
13
comment How traceable is ATM and point-of-sale credit card use back to you in practice?
The formatting works fine, you just didn't add any. Please read the markdown reference.
Jan
12
comment Should I be disabling Java?
It may also be worth mentioning that Java != JavaScript, and that they're completely distinct languages.
Jan
12
comment How about preventing CSRF this way?
@George So if the user changes the cookie value to a different ID, he could just log in as someone else... :s
Jan
11
comment passwords database - access control and/or synchronization
@episteme Any particular reason? A breach of the site shouldn't result in any passwords being stolen, since they're encrypted with the master passwords of the users.
Jan
11
comment passwords database - access control and/or synchronization
Oh, and in case you're wondering, I've got no affiliation with them whatsoever - the above is simply based on what's on their site and what I've heard other say! :)
Jan
11
answered passwords database - access control and/or synchronization
Jan
11
reviewed Approve Should I change the private key when renewing a certificate?
Jan
11
comment Looking for password manager in company
One issue that neither of the answers (so far) have covered is the idea that a user might now he/she is about to be terminated, and write down the passwords from the password manager vault. So even if you find the perfect technical solution for password storage, you still need to change every password they have access to anyway.
Jan
11
comment How about preventing CSRF this way?
So how does your server know that a user is "logged in"?
Jan
11
revised Where do I get started in terms of learning how to exploit Java and Flash vulnerabilities? or browser exploitation in general
added 440 characters in body
Jan
11
answered How about preventing CSRF this way?
Jan
11
comment Is Webroot's Business Endpoint Security up to snuff for mobile workforce?
@CristianDobre It does, but it doesn't emulate a lot of things like web browser startup (high paging rate), file searches and disk backpus (high disk I/O), etc. Also, you have to consider that "insignificant" is relative. If the AV produces a 2% increase in the total time it takes for me to do everyday tasks, that's an hour lost in a typical work week.
Jan
11
comment Why is it hard to catch cybercriminals?
I see no reference to antennas or wifi on that article.
Jan
10
awarded  Nice Answer
Jan
10
answered Where do I get started in terms of learning how to exploit Java and Flash vulnerabilities? or browser exploitation in general
Jan
10
answered Is Webroot's Business Endpoint Security up to snuff for mobile workforce?
Jan
10
revised Is Webroot's Business Endpoint Security up to snuff for mobile workforce?
fixed typo