network profile
| bio | website | about.me/justinclarke |
|---|---|---|
| location | London, United Kingdom | |
| age | 37 | |
| visits | member for | 2 years, 5 months |
| seen | Feb 18 '11 at 23:42 | |
| stats | profile views | 19 |
Author, Speaker, Consultant, Software Security Guy
Director and Co-Founder of Gotham Digital Science Ltd (a subsidiary of Gotham Digital Science LLC, based in New York). Senior security consultant with extensive international Big 4 risk management, security consulting and testing experience. Based in the United Kingdom, with previous experience in the United States and New Zealand. Lead author/technical editor of "SQL Injection Attacks and Defenses" - published May 2009 by Syngress, co-author of "Network Security Tools" - published April 2005 by O'Reilly, contributor to "Network Security Assessment, 2nd Edition", as well as a speaker at various security conferences and events such as Black Hat, EuSecWest, ISACA, BruCON, OWASP, OSCON, RSA and SANS. Currently Chapter leader of the OWASP London chapter, and a member of the OWASP Global Connections Committee.
|
Dec 21 |
awarded | Yearling |
|
Dec 21 |
awarded | Yearling |
|
Oct 29 |
awarded | Nice Answer |
|
Jan 19 |
comment |
What is the vulnerability in my PHP code? There are quite a few files (including some with dots in front of them so they may not show up in directory listings), which appear to be part of the phishing kit. I'm presuming the system is Internet facing? You may be better trying scanners like Skipfish/Netsparker etc to see what the original issue was - it may be something as simple as a PHP remote file include. |
|
Jan 19 |
answered | What are the realistic, and most secure crypto for Symmetric, Asymmetric, Hash, Message Authentication Code ciphers? |
|
Jan 19 |
answered | One Time Passwords. Using OTP at Windows, Ubuntu and internet sites |
|
Jan 19 |
awarded | Editor |
|
Jan 19 |
revised |
What is the vulnerability in my PHP code? Added img/74.php as well.; edited body; added 1 characters in body |
|
Jan 19 |
answered | What is the vulnerability in my PHP code? |
|
Jan 17 |
awarded | Supporter |
|
Jan 7 |
answered | What FDE (with hardware encrypted drives) for OS X works? |
|
Jan 6 |
answered | Do any of you who are *really* dealing with APT have any recommended intelligence feeds for SIEM/IDS/etc? |
|
Jan 6 |
comment |
Escaping JavaScript constants @AviD - yeah we do, but just for Java (AntiXSS for Java) |
|
Dec 27 |
answered | Escaping JavaScript constants |
|
Dec 22 |
comment |
Does an ORM framework such as hibernate completely mitigate SQL injection? Very true - use of an ORM such as Hibernate encourages you to use safe APIs and approaches. If you want to have a look at the logical endpoint, Microsoft's LINQ implementation is almost impossible to write SQL injectable code in by accident. |
|
Dec 21 |
awarded | Teacher |
|
Dec 21 |
answered | SQL Injection Prevention |
|
Dec 21 |
answered | Fortify360 - Sinks & Sources - Vulnerability count |
|
Dec 21 |
awarded | Autobiographer |
