1,560 reputation
11028
bio website serverfault.com
location
age 34
visits member for 4 years, 11 months
seen Dec 1 at 21:15

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Aug
27
comment Break into Windows 7?
@squillman I don't think you should tell people how to use their constitutional rights.
Aug
27
awarded  Organizer
Aug
27
comment Break into Windows 7?
@Izzy exploit writer != scriptkiddie. (Also I write code for aerospace. I just write exploits for fun :)
Aug
27
revised Break into Windows 7?
edited tags
Aug
27
comment Break into Windows 7?
So let me get this straight, you want to break into windows but a boot disk is too black hat for you. Would a privilege escalation exploit using buffer overflow in kernel level be okay? Or how on earth would you think of breaking into windows without using an exploit or a boot disk? This question is seriously wtf.
Aug
27
comment Break into Windows 7?
@Izzy I'm actually a programmer, I'm happy I'm not a sys admin. Mainly because of people that don't understand the first thing about computers are making decisions about how you should do your job. A boot disk is only a tool.
Aug
27
comment Break into Windows 7?
@Izzy look at the comment i just made to peter m.
Aug
27
comment Break into Windows 7?
@Peter M this is a legit solution its kind of mind boggling that someone would ask for your help and then not let you fix their machines. Its like going to a mechanic and being like, dude i need you to fix my car but you can't use wrenches. I fucking hate wrenches, a wrench killed my mother.
Aug
27
comment Break into Windows 7?
@Peter M aah yes rules that only keep moral people in line. Kind of like how everyone's doors only have locks that are easy to pick.
Aug
27
comment Break into Windows 7?
@Peter M I write exploit code and release it 0-day, I don't give a fuck. I never break the law. This solution is not against the law if you have permission, he could just call the guy and ask.
Aug
27
comment Break into Windows 7?
@David Mackintosh good call.
Aug
27
revised Break into Windows 7?
added 114 characters in body; added 42 characters in body; added 61 characters in body
Aug
27
comment Break into Windows 7?
@squillman or maybe he is a moron or infected with a virus...
Aug
27
comment Break into Windows 7?
@Sam Cogan you have a warped idea of what hacking is. This is a solution to a problem and no one is getting hurt.
Aug
27
comment Break into Windows 7?
@Peter M either you change the password using a well founded (a boot disk) method or you ship it back.
Aug
27
comment Break into Windows 7?
@squillman who said anything about hacking? He is given permission to access the machine and Microsoft isn't stopping you. Also note that my solution is good for the environment as it saves money and Co2.
Aug
27
accepted What is the funniest firewall rule set?
Aug
27
accepted What is the best Web Application Firewall for IIS?
Aug
27
accepted Secure IIS/MS-SQL
Aug
27
answered Break into Windows 7?