1,545 reputation
11028
bio website serverfault.com
location
age 34
visits member for 4 years, 9 months
seen yesterday

Do not trust any security related answers you see on SO. Not from me, not from anyone. There are very smart people on SO and there are excellent answers given, although the right answer is almost never chosen. Test everything, trust no one.

I have been writing exploit code for more than 4 years. I have spoken 3 years in a row at DEFCON. Currently I am the top answerer and asker of security questions on Stack Overflow.

I actively hunt for vulnerabilities and I have found many over the years. According to the Department of Homeland I have found a vulnerability with a severity metric of 13.5 which makes it into the top 1,000 most dangerous of all time and the most dangerous CSRF vulnerability ever discovered.


Jun
7
comment What is the best Solid State File System (SSDFS) for Linux?
Actually this is a better link saying that non-ssdfs's are bad, although it also goes on to say that some manufactures will use a microcomputer to implement ware leveling. en.wikipedia.org/wiki/Wear_leveling#Rationale
Jun
7
comment What is the best Solid State File System (SSDFS) for Linux?
@Graeme Donaldson en.wikipedia.org/wiki/Flash_file_system says that ware leveling is done by the file system.
Jun
4
comment Apache Probes — what are they after?
I am pretty sure this is just a directory traversal TEST and not an actual exploit, they are probably looking for LFI/RFI.
May
24
comment Site without “www” is hacked !
is it a php-nuke site?
May
19
comment SELinux vs. AppArmor vs. grsecurity
yeah but yum and selinux are so damn annoying.
May
18
comment What information can an outsider obtain from my system by knowing only the IP address?
+1 Yes, a port scan is way useful. It looks like no one else on this thread knows what this means.
May
18
comment What information can an outsider obtain from my system by knowing only the IP address?
Wow amazing how an answer that provides zero information can be up voted so much.
May
17
comment IT Audit checklist
@PHLiGHT To be honest paying money for something doesn't always make it better.
May
17
comment Is it ethical to hack real systems?
Corporations pay large sums of money to penetration testers to break into their own systems. A good penetration tester will use a live exploit to break in and leverage the issue to find more vulnerabilities. It comes down to permission.
May
15
comment Attack from anonymous proxy
Its only a matter of time before you are hacked though Wordpress.
May
6
comment Got Hacked. Want to understand how
@grawity most people don't use "ftps", but that will keep you from getting hacked. sftp is more popular.
May
4
comment E-mail sent with postfix are marked as spam
@Chris S I have said absolutely nothing about a residential internet connection, I think you are tripping. This is a dedicated server at a real hosting company.
May
3
comment E-mail sent with postfix are marked as spam
I don't think Postfix needs to talk to Google. Further more I fail to see why I should allow incoming 25 if i'm not accepting incoming email (except for bounces which i'm choosing to ignore because each email address has to be registered)
May
3
comment E-mail sent with postfix are marked as spam
+1 my server's IP is on this list... Butm I don't understand why people think i'm trying to send email from my house. This is a dedicated server.
May
3
comment E-mail sent with postfix are marked as spam
Btw this never fixed my problem. Google is doing something strange.
Apr
30
comment Repairing yum's repositories on a RHEL5
Your right, i am missing the redhat repo! How do I re-add it?
Apr
27
comment Improving VPN performance - stronger encryption = more performance?
The use of AES will increase bandwidth usage by only a few bytes because its a block cipher, the use of RC4, a stream cipher will not use increase bandwidth by a single bit vs a plain text transfer.
Apr
26
comment Remove identifying information from SSH
I am not concerned with vulnerabilities in ssh per say. There aren't many vulnerabilities in ssh, so keeping it up to date won't be that difficult. I am more concerned with an attackers ability profile and then replicate my server and conduct simulated attacks such that a real attack will become more successful.
Apr
26
comment Remove identifying information from SSH
+1 Port knocking is very cool. Although i disagree with the security though obscurity comment. This information gives details that are only useful to attacker. By looking at this string an attacker knows I'm using a 64bit ubuntu system and they can make sure their exploit works against that system, this is especially important for buffer overflows where 1 wrong bit means a crash instead of a remote shell.
Apr
15
comment Necesity of ModSecurity if Apache is behind Nginx
mod_security does not stop csrf/xsrf, in fact no WAF can do this properly.