423 reputation
25
bio website about.me/justinclarke
location London, United Kingdom
age 39
visits member for 3 years, 8 months
seen Feb 18 '11 at 23:42

Author, Speaker, Consultant, Software Security Guy

Director and Co-Founder of Gotham Digital Science Ltd (a subsidiary of Gotham Digital Science LLC, based in New York). Senior security consultant with extensive international Big 4 risk management, security consulting and testing experience. Based in the United Kingdom, with previous experience in the United States and New Zealand. Lead author/technical editor of "SQL Injection Attacks and Defenses" - published May 2009 by Syngress, co-author of "Network Security Tools" - published April 2005 by O'Reilly, contributor to "Network Security Assessment, 2nd Edition", as well as a speaker at various security conferences and events such as Black Hat, EuSecWest, ISACA, BruCON, OWASP, OSCON, RSA and SANS. Currently Chapter leader of the OWASP London chapter, and a member of the OWASP Global Connections Committee.


Dec
21
awarded  Yearling
Dec
21
awarded  Yearling
Oct
29
awarded  Nice Answer
Jan
19
comment What is the vulnerability in my PHP code?
There are quite a few files (including some with dots in front of them so they may not show up in directory listings), which appear to be part of the phishing kit. I'm presuming the system is Internet facing? You may be better trying scanners like Skipfish/Netsparker etc to see what the original issue was - it may be something as simple as a PHP remote file include.
Jan
19
answered What are the realistic, and most secure crypto for Symmetric, Asymmetric, Hash, Message Authentication Code ciphers?
Jan
19
answered One Time Passwords. Using OTP at Windows, Ubuntu and internet sites
Jan
19
awarded  Editor
Jan
19
revised What is the vulnerability in my PHP code?
Added img/74.php as well.; edited body; added 1 characters in body
Jan
19
answered What is the vulnerability in my PHP code?
Jan
17
awarded  Supporter
Jan
7
answered What FDE (with hardware encrypted drives) for OS X works?
Jan
6
answered Do any of you who are *really* dealing with APT have any recommended intelligence feeds for SIEM/IDS/etc?
Jan
6
comment Escaping JavaScript constants
@AviD - yeah we do, but just for Java (AntiXSS for Java)
Dec
27
answered Escaping JavaScript constants
Dec
22
comment Does an ORM framework such as hibernate completely mitigate SQL injection?
Very true - use of an ORM such as Hibernate encourages you to use safe APIs and approaches. If you want to have a look at the logical endpoint, Microsoft's LINQ implementation is almost impossible to write SQL injectable code in by accident.
Dec
21
awarded  Teacher
Dec
21
answered SQL Injection Prevention
Dec
21
answered Fortify360 - Sinks & Sources - Vulnerability count
Dec
21
awarded  Autobiographer