57,410 reputation
17139235
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 9 months
seen Jul 15 at 23:36

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Feb
3
reviewed Excellent Is it preferable to perform encryption using database functions or code?
Feb
3
reviewed Excellent How secure is Windows 8 email authentication?
Feb
3
reviewed Excellent What does a HTML filter need to do, to protect against SVG attacks?
Feb
3
reviewed Satisfactory Is it possible to boot into root's /bin/bash on a LUKS encrypted device?
Feb
3
reviewed Satisfactory Future proof encryption possible in theory?
Feb
3
answered Encrypting user data using password and forgot my password
Feb
2
asked Maltego transform samples
Feb
2
awarded  Popular Question
Feb
1
reviewed Approve Reverse engineering malware/viruses
Feb
1
accepted What goes into an average incident response process for a corporate network?
Feb
1
accepted Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
Feb
1
accepted Better way to import Win32 APIs from injected shellcode
Feb
1
accepted How can SMS spoofing be detected?
Feb
1
accepted How does OCSP stapling work?
Feb
1
awarded  Nice Question
Jan
30
comment How can PayPal spoof emails so easily to say it comes from someone else?
You seem to misunderstand why I asked you to provide an excerpt. StackExchange isn't just yet another Q&A site - it aims to be a go-to source for clear answers and information. As such, SE has a range of guidelines and rules about content, and one of those is that answers shouldn't consist of only a link, especially when the external media isn't text. If the links change on the 3rd party site later, your answer becomes completely useless - otherwise known as link rot. This is a requirement of all answers across the StackExchange network.
Jan
29
reviewed Approve Best practice advice - folder security (windows environment)
Jan
29
comment default.php file found on the server, is this a security threat?
@derobert The system command was disabled for security reasons, and the PHP process is sandboxed.
Jan
29
comment How can PayPal spoof emails so easily to say it comes from someone else?
I have listened to them before - I was a regular listener back in the mid-2000s, before I knew any better. See Attrition.org's full set of articles about him (the link I provided) for more details. It's widely accepted by the infosec community that he makes up stuff on the spot and spins it into hype, for the purposes of marketing.
Jan
29
awarded  Nice Answer