53,807 reputation
17130221
bio website en.wikipedia.org/wiki/…
location United Kingdom
age 27
visits member for 3 years, 6 months
seen yesterday

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.


Apr
17
comment Why do some bank websites use passwords that are not case sensitive?
You're more likely to find that the hardware is new (e.g. IBM Power Systems kit), but the OS is a Unix-like distro such as AS/400 which is technically ancient, but still maintained.
Apr
17
comment Why do some bank websites use passwords that are not case sensitive?
Yup, my money is on it being a frontend for an AS/400 or similar.
Apr
15
comment What does this malicious PHP script do?
Right, that's the encoding mechanism. But what's the payload?
Apr
15
comment Malicious Website URL
@CHANist You can, but it can't be blanket blocked for everyone easily if it's just an IP. With a domain it can be killed by the domain provider (e.g. 1and1, Nominet, etc.) based on an abuse report, which means nobody can reach it via that domain any more.
Apr
15
comment What is the primary function of the transport layer in the Internet protocol networking code
This is not a security question. Flagged for migration to SU.
Apr
15
comment Security issues with multiple interfaces
@Stephane Please don't use the close/downvote features for questions where you think the asker is confused or mislead about the situation, when the question itself is on-topic and relatively clear. It's much more constructive to ask for clarifications and provide advice which clears up the confusion than to just dismiss the question.
Apr
15
comment Null Session Questions
@raven A CS student might well think it's a good question, but that doesn't make the question fit for StackExchange. I'm still not really understanding what you're asking - but I'd take a guess that you want to know whether a locally created named pipe can be accessed remotely via SMB, using the Anonymous logon (null session). Did I get that right?
Apr
14
comment How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?
Also, check if your filesystem is mounted nosuid.
Apr
14
comment How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?
Did you run id -u to show the effective UID?
Apr
14
comment Email phishing scam asking customers for card details
"Contact gmail" - care to point to where? I'm not sure that they have a generic abuse contact point.
Apr
14
comment Email phishing scam asking customers for card details
First thing: Send out a mass email to your customers explaining that this is happening, warning them NOT to reply to any requests for personal details or financial information via email, and assuring them that you will NEVER ask for such information.
Apr
14
comment Null Session Questions
@raven You should keep in mind that StackExchange has very specific question quality requirements, to avoid large numbers of poor questions and answers which drown out the quality content. Don't take it personally.
Apr
14
comment Null Session Questions
@raven I've read your question a number of times, and am familiar with Windows networking and SMB, but still don't understand what you're asking. You've mentioned null sessions a bunch of times, and asked if Windows still "uses them" (which in itself is vague - does it use them for what?), but you haven't been clear about what specific security question you have. Feel free to edit your question (there's an edit button underneath it) to clarify exactly what you're asking.
Apr
12
comment Is VBScript an actual tool to attack users?
I'm too drunk to check right now, but if I remember correctly Chrome, Firefox, and Opera can run VBscript if you enable it.
Apr
12
comment Is VBScript an actual tool to attack users?
A lot of browsers also don't run VBScript by default.
Apr
12
comment How does consent.exe know what to display?
Good question. Could you check if the second number is a valid thread ID within the process?
Apr
12
comment Achieving PFS with public key cryptography
It was just a number I pulled from the air that wouldn't cause any tangible harm to security should it be taken literally. Feel free to replace it to fit your security bound.
Apr
7
comment Create a unterminable process in Windows
@HarryJohnston Nice find. I'll include it in the answer.
Apr
1
comment can you know the computer that an email came from?
Are you talking about the sender's IP? Because that is often recorded in the headers, though obviously the sender may use an anonymous mail agent or other anonymising methods (e.g. a proxy, VPN, Tor, etc.) to send the mail.
Apr
1
comment How to convince my management of a physical security risk?
@RoryAlsop FC's talks are never recorded, unfortunately. Makes sense, as he wants to minimise the number of people who know what he looks like.