1,555 reputation
11028
bio website serverfault.com
location
age 34
visits member for 4 years, 9 months
seen Oct 22 at 5:57

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Oct
25
awarded  Tumbleweed
Oct
18
accepted Why can't I get a 5.3.3 libphp.so?
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
yeah but i'm not getting a .so! thats the whole point of this post.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Thanks, but i don't want to use php-cgi. i want a libphp5.so.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
I have totally used the --enable-so option before. I just grabbed the latest 5.3.3 source from php.net and its not there, i even tried grepping though the -h looking or .so, so such luck. There is a php-cgi option, but i don't want that.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Yeah i have that in my ./configure and i'm not getting a .so file. find . | grep "\.so" doesn't find anything :(
Oct
18
asked Why can't I get a 5.3.3 libphp.so?
Oct
12
answered Securing MySQL Resources?
Oct
11
accepted I just did a chmod -x chmod
Oct
11
asked I just did a chmod -x chmod
Sep
29
comment Can I do a ctrl-z without the process locking up?
and @wzzrd yeah but its not a job, its just a command like firefox.
Sep
28
comment Can I do a ctrl-z without the process locking up?
It says "no such job"
Sep
28
asked Can I do a ctrl-z without the process locking up?
Sep
2
answered Could anyone give me some suggestion about configure secure audit system
Sep
2
comment Break into Windows 7?
-1 i thought you said no exploits? wtf?
Sep
2
comment Break into Windows 7?
@chunkyb2002 well peter m didn't want to use a bootdisk, and he accepted your answer which is just a straight up black hat attack that does the exact same thing. Its really baffling. I think that people just don't understand security at all.
Aug
29
comment Break into Windows 7?
@Peter M and @chunkyb2002 can someone please explain how this is not an exploit?
Aug
27
comment Break into Windows 7?
@squillman Touché, I wonder why they haven't implemented a word filter.
Aug
27
comment Break into Windows 7?
@Izzy Your welcome to look at my profile for the severity metric, but I don't have a list of the ~25 CVE numbers I've accumulated. After a while you just kind of loose track.
Aug
27
comment Break into Windows 7?
@Izzy Another CVE number would be nice :) Or maybe a bugtraq ID. Another DHS severity metric would be really sweet. Have you ever gotten one of toughs?