576 reputation
311
bio website rushyo.com
location United Kingdom
age 28
visits member for 4 years, 7 months
seen 2 days ago

Security researcher, found an OWASP Top 10 in SO.

Work full time securing clinical systems.

Occasional volunteer Firefox developer.

17 years programming and counting.


Mar
1
awarded  Good Answer
Feb
28
comment I managed to capture a botnet control host, what do I do with it?
@Shadur If you really think the data you can collect is that valuable (I suspect it's not) then then you may wish to try something like Volatility to record the current forensic state of your RAM at least. The trouble is that if you screw it up you can end up doing more harm than good.
Feb
28
comment I managed to capture a botnet control host, what do I do with it?
@MasonWheeler That would probably be govcert.nl in this instance.
Feb
28
awarded  Yearling
Feb
28
awarded  Mortarboard
Feb
28
awarded  Nice Answer
Feb
28
comment How to Secure My DropBox Installation?
Quite. This is ideological fluff, not an appropriate answer to the question.
Feb
28
comment Using ModSecurity as transparent mode
It's not clear to me what you're asking. ModSecurity is a server-side technology. It doesn't sit between your server and client.
Feb
28
answered I managed to capture a botnet control host, what do I do with it?
Feb
28
awarded  Citizen Patrol
Feb
28
comment I managed to capture a botnet control host, what do I do with it?
Given he said 'my webhosting customers' I think it's fair to assume he doesn't have a SIRT/CERT team backing him up.
Feb
28
awarded  Critic
Feb
28
comment Is it safe to install metasploit in my daily-used computer
Unless you're running on a laptop from ancient times, you shouldn't have any trouble running one of the smaller *nix distros. You don't need to feed a dedicated Metasploit VM with RAM and processing power like you would a general-purpose Windows VM.
Feb
24
awarded  Yearling
Feb
24
awarded  Editor
Feb
24
revised SMTP and SSL/TLS
Typo
Feb
24
answered SMTP and SSL/TLS
Feb
24
awarded  Commentator
Jan
28
comment default.php file found on the server, is this a security threat?
Kind of the RAT to handle file locking nicely...
Aug
21
awarded  Caucus