meta user
network profile
| bio | website | provoscooter.com |
|---|---|---|
| location | Utah | |
| age | 29 | |
| visits | member for | 2 years, 5 months |
| seen | May 18 at 8:16 | |
| stats | profile views | 27 |
|
Feb 6 |
answered | PCI-DSS for VX570 and POS on same network |
|
Jan 30 |
answered | What should I have prepared for a PCI compliance onsite assessment? |
|
Jan 21 |
awarded | Yearling |
|
Dec 15 |
answered | Precedent for an in-house cardholder information server? |
|
Sep 21 |
answered | PCI Policy Management software? |
|
Sep 17 |
awarded | Nice Answer |
|
Sep 10 |
answered | Which PCI DSS SAQ applies when you don't store store but transmit CHD? |
|
Sep 7 |
comment |
Minimum requrements for storing last 4 digits of credit card number? @AndreyBotalov Req 3.3 governs how much of a PAN you can display if you are storing the whole thing. You can freely display the portions that aren't sensitive (first six, last four) just as you can store the parts that aren't sensitive without being required to meet the DSS requirements. |
|
Sep 7 |
answered | Minimum requrements for storing last 4 digits of credit card number? |
|
Aug 21 |
awarded | Caucus |
|
Aug 15 |
awarded | Yearling |
|
Aug 15 |
answered | How to convince coworkers to not store credit card numbers ourselves |
|
May 30 |
comment |
Can IP address be a component of 2-factor authentication? This is a great question with PCI compliance implications since many organizations host their production environment elsewhere and would like to create a site-to-site IPSEC VPN between them. PCI requires two-factor for remote network access but if you accept the public IP address as a factor then the requirement is met. |
|
Nov 4 |
comment |
PCI Scanning and authenticated user pages I'm not aware of any automated solutions that allow credentials. If you used a more manual solution I'm sure they wouldn't have any problem using credentials you supply. I agree those marketing terms are both laughable and misleading. PCI is good but not sufficient for those with real security concerns. |
|
Oct 20 |
answered | PCI Scanning and authenticated user pages |
|
Aug 26 |
awarded | Critic |
|
Jun 21 |
answered | Is PCI DSS applicable to other solutions than those dealing with payment cards? |
|
Jan 25 |
comment |
Good (preferably free) resource for CISSP practice questions Since the test is so, so broad I did find the definition approach to be the most helpful. If you know all of the terms and loosely how they relate to each other and what each terms main security implications are, that is pretty much as good as you can do. The test questions are a good measure of how well you have done this. |
|
Jan 23 |
comment |
Relative importance of CHROOT for web servers Thank you all for helping me get to the bottom of this. Very informative. |
|
Jan 22 |
awarded | Scholar |
