1,530 reputation
11027
bio website serverfault.com
location
age 34
visits member for 4 years, 6 months
seen Mar 12 at 15:22

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Aug
27
comment Break into Windows 7?
@Peter M this is a legit solution its kind of mind boggling that someone would ask for your help and then not let you fix their machines. Its like going to a mechanic and being like, dude i need you to fix my car but you can't use wrenches. I fucking hate wrenches, a wrench killed my mother.
Aug
27
comment Break into Windows 7?
@Peter M aah yes rules that only keep moral people in line. Kind of like how everyone's doors only have locks that are easy to pick.
Aug
27
comment Break into Windows 7?
@Peter M I write exploit code and release it 0-day, I don't give a fuck. I never break the law. This solution is not against the law if you have permission, he could just call the guy and ask.
Aug
27
comment Break into Windows 7?
@David Mackintosh good call.
Aug
27
comment Break into Windows 7?
@squillman or maybe he is a moron or infected with a virus...
Aug
27
comment Break into Windows 7?
@Sam Cogan you have a warped idea of what hacking is. This is a solution to a problem and no one is getting hurt.
Aug
27
comment Break into Windows 7?
@Peter M either you change the password using a well founded (a boot disk) method or you ship it back.
Aug
27
comment Break into Windows 7?
@squillman who said anything about hacking? He is given permission to access the machine and Microsoft isn't stopping you. Also note that my solution is good for the environment as it saves money and Co2.
Aug
20
comment SSH config file?
Belongs on server fault.
Aug
9
comment Which bots and spiders should I block in robots.txt?
@Farseeker I do not see a problem with punishing the ones who break the rules. Although tricking spammers with bad data is an interesting twist.
Aug
9
comment Which bots and spiders should I block in robots.txt?
@Steven Sudit that is not a bad idea. This would be called a honey pot.
Aug
6
comment keylogger security
@Michael Kohne your right the paper is entitled "Sniffing Keystrokes With Lasers and Voltmeters", its a good read i posted a link to it in my post.
Aug
6
comment keylogger security
Actually no, I just found out that van eck phreaking does work with LCD (en.wikipedia.org/wiki/Van_Eck_phreaking)
Aug
6
comment keylogger security
@Bill Weiss Okay fine, "Van Eck Phreaking", which has absolutely nothing to do with this question.
Aug
6
comment keylogger security
i think the OP is mistaken, i don't see how TEMPEST relates to this question at all. Although props on knowing a lot about this.
Jul
27
comment Card Reader and Software
@Robert if the three links i posted isn't enough information then i'm sorry but i don't think anyone can help. A smartcard has doesn't require multi-factor authentication. Apples and oranges, mag strips are EXTREMELY insecure and are trivial to clone, this would be massive mistake.
Jul
26
comment What is the funniest firewall rule set?
Wow, how is this not a real question?
Jul
24
comment Securely installing Wordpress in a subdirectory on a server
haha, security and wordpress in the same sentence. If you use wordpress your screwed and there is nothing you can do about it. I have looked at the code and i have reported vulnerabilities that project, their idea of secuirty is a joke.
Jul
24
comment Preventing programmer from copying information
@PaulWaldman As long as the contractor is in the US you can sue him, there is nothing else you can do. (i like how you didn't post an answer :)
Jul
18
comment Is there a windows equivalent to chroot?
@Nathan Adams I agree, but "security in layers".