19,649 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 1 hour ago

Security Architect


May
24
comment What items should be on a malware remediation checklist?
You might also want to include in the list other forensic analysis outside of the machine (e.g. network activity) and account compromise forensics.
May
24
comment What items should be on a malware remediation checklist?
This question might be a little broad, and would require multiple people submitting their contributions to a master list. This forum is not a good fit for that form of question. Also, do you intend to limit the list to just Windows machines?
May
24
comment Host Protected Area forensics
@paj28 sure - though the BIOS - but even so, the question is still broad and nebulous to answer
May
23
comment Host Protected Area forensics
If the question was how to extract, then there might be a security question.
May
23
comment Host Protected Area forensics
The problem is that there isn't a security question. The answer is: whatever the bios might put in there. Every bios is different and some might not use it. I don't see this as a forensics question but a bios question.
May
22
comment I have iPhone 6 plus - can my boyfriend hack into my accounts?
I'm sorry but there is not much we can do for you. Anything is possible, and it is possible that you kept yourself logged into your email account and that person simply changed your password or other settings.
May
22
comment I have iPhone 6 plus - can my boyfriend hack into my accounts?
Hack into your server? Do you mean your phone? Or your iCloud account?
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
There's a lot more to it than that: it has turned the server in to a command and control center for (likely) a botnet. Bots connect and retrieve commands.
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
Please calm down. First, you assume that I downvoted you, and I did not. Second, I have explained the alternate sites where you could get help and explained the reasons for why this is not the best fit here. It IS a valid question and worthy of an answer. It's just not the best fit here. That's all.
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
And we started to get a flood of these types, and the community decided to direct folks over to codereview or stackoverflow (meta.security.stackexchange.com/questions/1767/…)
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
But this is code review. stackoverflow.SE, and even codereview.SE might be a better fit.
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
I'm voting to close this question as off-topic because PHP code de-obfuscation is off-topic.
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
Although de-obfuscating these nuggets are fun, they are unfortunately off-topic here. We could be doing code reviews all day :)
May
22
comment How to filter secure (HTTPS) websites by URL with regular expression?
ah - I assume this is related to your other question? We need more context in order to help you.
May
22
comment How to filter secure (HTTPS) websites by URL with regular expression?
do you want to block users from reaching certain pages on your server, or do you want to prevent your browser from accessing pages on someone else's server?
May
22
comment How to filter secure (HTTPS) websites by URL with regular expression?
from the server's perspective or the browser's perspective?
May
22
comment What does this snippet of code do exactly? found it inside a number of files on my webserver
Short answer is: is it doesn't matter what it is - it is to be considered 'bad'. I would consider rebuilding your server.
May
22
comment What makes an Android application vulnerable to Cross-site scripting (XSS)?
Just this: don't cross-post, and ask one question at a time
May
22
comment What makes an Android application vulnerable to Cross-site scripting (XSS)?
the common thread to your questions is that Android itself is not the problem - the programs/apps/services run by Android are the ones vulnerable
May
22
comment What makes an Android application vulnerable to Cross-site scripting (XSS)?
I'm trying to help you get the answers you seek - I'm not trying to give you a hard time - what you've done so far has increased the risk of your questions getting closed