Reputation
59,205
Next tag badge:
593/400 score
74/80 answers
Badges
17 146 241
Newest
 Nice Answer
Impact
~2.4m people reached

Feb
1
accepted How does OCSP stapling work?
Feb
1
awarded  Nice Question
Jan
30
comment How can PayPal spoof emails so easily to say it comes from someone else?
You seem to misunderstand why I asked you to provide an excerpt. StackExchange isn't just yet another Q&A site - it aims to be a go-to source for clear answers and information. As such, SE has a range of guidelines and rules about content, and one of those is that answers shouldn't consist of only a link, especially when the external media isn't text. If the links change on the 3rd party site later, your answer becomes completely useless - otherwise known as link rot. This is a requirement of all answers across the StackExchange network.
Jan
29
reviewed Approve Best practice advice - folder security (windows environment)
Jan
29
comment default.php file found on the server, is this a security threat?
@derobert The system command was disabled for security reasons, and the PHP process is sandboxed.
Jan
29
comment How can PayPal spoof emails so easily to say it comes from someone else?
I have listened to them before - I was a regular listener back in the mid-2000s, before I knew any better. See Attrition.org's full set of articles about him (the link I provided) for more details. It's widely accepted by the infosec community that he makes up stuff on the spot and spins it into hype, for the purposes of marketing.
Jan
29
awarded  Nice Answer
Jan
29
comment How can PayPal spoof emails so easily to say it comes from someone else?
-1 for not actually providing any content. Also, Steve Gibson is a known charlatan with very little real security knowledge.
Jan
29
comment Which hard disk encryptions schemes are tied to the original hardware?
I've often heard it described as the standard, and I don't know of another free open-source cross-platform solution that's as pervasive as TC is.
Jan
29
revised How to satisfy requirement 10.6 of PCI DSS?
example
Jan
29
answered How to satisfy requirement 10.6 of PCI DSS?
Jan
29
answered Which hard disk encryptions schemes are tied to the original hardware?
Jan
29
revised What goes into an average incident response process for a corporate network?
clarifications
Jan
29
asked What goes into an average incident response process for a corporate network?
Jan
29
answered Debugging and DLL-Injection
Jan
29
comment default.php file found on the server, is this a security threat?
Ok, I've added an update to include a detailed description of how I de-obfuscated it, and the script I built to do the automatic decryption.
Jan
29
revised default.php file found on the server, is this a security threat?
de-obfuscation info
Jan
29
comment default.php file found on the server, is this a security threat?
@AliAhmad I did it in the sandbox, so I don't have it any more, but I'll write something up.
Jan
29
awarded  Guru
Jan
28
comment default.php file found on the server, is this a security threat?
@Michael Read the comments above yours, I just explained exactly that. Essentially I just replaced each eval with a return until it was fully unpacked.