1,570 reputation
11129
bio website serverfault.com
location
age 34
visits member for 5 years, 2 months
seen Mar 16 at 4:38

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Aug
9
awarded  Notable Question
Jul
26
comment How to have better mysqld reliability in EC2?
-1 massive security risk.
Jul
15
awarded  Notable Question
Jun
10
comment The use of the underscore in host names
@Ward well they might be used for some strange windows/android voodoo...
Jun
10
revised The use of the underscore in host names
deleted 19 characters in body
Jun
9
comment The use of the underscore in host names
+1 good answer.
Jun
9
comment The use of the underscore in host names
wow -1 without a reason why? Is this not a reasonable question?
Jun
9
awarded  Peer Pressure
Jun
9
asked The use of the underscore in host names
Jan
5
awarded  Yearling
Dec
20
awarded  Popular Question
Nov
7
answered Concerns about a Dedicated (Windows Server 2008) + DDoS
Sep
5
awarded  Enlightened
Aug
27
awarded  Popular Question
Aug
25
awarded  Popular Question
Aug
9
awarded  Popular Question
Jul
26
accepted Firewall rules that will cause problems for nmap
Jul
12
comment Connecting to a malicious VPN
@syneticon-dj also a good consideration. That is definitely an attack surface to worry about, even if you are blocking all incoming traffic.
Jul
12
comment Connecting to a malicious VPN
@DerfK +2 excellent considerations. (i just up-voted another random post of yours.)
Jul
12
accepted Connecting to a malicious VPN