Reputation
6,574
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
4 13 46
Newest
 Nice Answer
Impact
~326k people reached

Aug
7
answered Recommended options for LUKS (cryptsetup)
Aug
7
comment Is a cookie safer than a simple HTTP header?
Are you saying Referrer contains the full query string? Or just variables passed as part of the path?
Aug
5
comment buffer overflow attack scripts
Also, if you are seeing these strings in the context of a specific vulnerability, what you are looking at is the whole exploit; the shellcode and the correct structure and address overwrite.
Jul
30
answered How to white hat Pen Test SQL injection
Jul
22
reviewed Leave Open Eye-Tracking, Public Access Points and Password Protection
Jul
17
reviewed Leave Open Write & “WHERE” Clause Only?
Jul
17
reviewed Leave Open Brute forcing ssh keys
Jul
17
reviewed Leave Open How much detail to publicise when a software vendor patches and issues an advisory?
Jul
17
comment Modern, security-conscious, PHP book?
In answer to your final paragraph; PHP security is a great area to be in career-wise. Given that the vast majority of sites out there are PHP and very insecure. People scoff at PHP because it lends itself to being very badly written. It is also a pretty broken language in general, making it often difficult to secure properly. PHP is unlikely to be a technology of choice when implementing a security-focused system for these reasons.
Jul
17
comment To get security clearance, do I need to be national of the country?
Most IT Security jobs involve sitting on a chair, and using a keyboard, we don't answer questions about peripherals here though.
Jul
17
comment To get security clearance, do I need to be national of the country?
This question appears to be off-topic because it is about Personnel Security.
Jul
17
comment How can I audit which type of Block Mode encryption is being used when no source code is available?
"The Source is Always Available" - Lynks, Reverse Engineer, 2013.
Jul
15
comment To DMZ, or not to DMZ
@Safado what you just explained has nothing to do with a DMZ, and everything to do with network segregation.
Jul
15
comment Can you make a digital signature using the receiver's public key?
@Matthew incorrect. I could tamper with the document and recalculate the 'signature' because the key used to do so is public. A signature of this kind holds no value.
Jul
15
comment How can I see traceroute details in NMAP?
Yeah on linux you would just do traceroute <remote_ip> on windows, tracert <remote_ip> does the same thing.
Jul
15
reviewed Edit How can I see traceroute details in NMAP?
Jul
15
revised How can I see traceroute details in NMAP?
added 25 characters in body
Jul
15
comment How can I see traceroute details in NMAP?
Why not just use traceroute? (Or tracert because you're on windows)
Jul
15
reviewed Leave Open What are the privacy pros and cons of using a public DNS server vs. your own?
Jul
14
comment Why does broad based malware use XOR obfuscation?
+1 pretty much this. There is always a trade-off. Sometimes file size/computational complexity is more important than obfuscation. Certainly highly complex obfuscation technologies exist.