329 reputation
110
bio website
location
age
visits member for 2 years, 9 months
seen Dec 11 at 16:21

Mar
23
awarded  Yearling
Nov
16
answered Is it legal to store/send user's device's IMEI/MEID?
Nov
15
awarded  Commentator
Nov
15
comment Spoofing USSD messages
Well, it's coming up to 8 days since this question was asked and the bounty is due to expire soon. Does anyone have any suggestions on a better way to get this question answered? Or another site where it is likely to attract some mobile security experts?
Nov
13
awarded  Critic
Nov
9
awarded  Promoter
Nov
7
asked Spoofing USSD messages
Jul
9
comment How should I tell an organisation that they are vulnerable when I wasn't given permission to check?
Are you sure it was the Wi-Fi of the village hall? Could have been a neighbouring house? The village halls I've been to have been surrounded with residential places. I would be sure who it was before you start thinking about informing anyone.
Jun
28
comment What prevents people getting charged over NFC in crowded places?
@romkyns I did some more research into the production process of Barclay's NFC technology. They have a NFC sticker called a "Paytag" which is encrypted twice which is probably a similar technique to their cards. barclaycard.co.uk/personal/paytag/paytag/production-process Regarding the PIN entry, it should be logged on their systems whether a PIN was requested or not.
Jun
28
comment What prevents people getting charged over NFC in crowded places?
Not 100% correct @curiousguy the British bank Barclay's will ask for your pin to be typed into the NFC reader "occasionally". barclaycard.co.uk/personal/getting-more/contactless But that will be just to authorise a payment. I'm sure the information held on the NFC is probably still readable.
Jun
28
awarded  Editor
Jun
28
revised What prevents people getting charged over NFC in crowded places?
You are only talking about Google Wallet there are other NFC banking apps.
Jun
28
comment Block the HTTPS version of a website
@momo1729 Using that software or a similar method it should be possible to append Google and Youtube in their SSL version. Looking at the comment at the bottom of the forum post I placed up it doesn't specify the protocol so should potentially apply it. I tried adding &safe=strict to a encrypted.google.com search result URL and it forced me into safe search mode.
Jun
28
answered What prevents people getting charged over NFC in crowded places?
Jun
28
comment Block the HTTPS version of a website
I don't have time to research this product fully so leaving this as a comment, but using ISAPI_Rewrite 2link someone was able to rewrite cookies to force safe search on Bing, Google and YouTube. link
Jun
28
awarded  Citizen Patrol
Jun
26
awarded  Analytical
Jun
25
answered How do hacking groups register domains remaining anonymous?
Jun
25
answered How does a server obtain the IP Address of a user?
Apr
17
answered “Doxing” users on Social Media