1,864 reputation
517
bio website budo.markcwallace.net
location United States
age 51
visits member for 1 year, 6 months
seen yesterday

I'm currently studying Tomiki Aikido under Dr. Yoji Kondo, although I started in Yoshinkan aikido under Helton-Sensei. I'm also studying Taiji under D. Gilmer at StillwaterTaichi I'm informally studying jo and bokken.

When I'm not on the mat, I provide project management support to the the Identity, Credential, and Access Management program at a US Federal Cabinet agency, but I want to get back into risk management and computer security/information assurance.


Apr
10
reviewed No Action Needed OpenSSL Heartbeat (Heartbleed bug) - what's the payload used for?
Apr
10
reviewed No Action Needed Could a router protect our network or need we use an hardware firewall?
Apr
10
reviewed No Action Needed Heartbleed client side attack: What can the attacker obtain?
Apr
10
reviewed Reviewed Would the Heartbleed bug have been prevented if OpenSSL was written in Go/D/Vala?
Apr
10
reviewed No Action Needed Doesn't the Heart Bleed vulnerability imply that we need to change passwords for *all* systems?
Apr
10
reviewed No Action Needed Ping response contain subnet ip
Apr
10
reviewed No Action Needed My machine is hacked by someone and used to attack others via ssh, how to stop it?
Apr
10
reviewed No Action Needed How to explain Heartbleed without technical terms?
Apr
10
reviewed No Action Needed Could a router protect our network or need we use an hardware firewall?
Apr
10
reviewed Reviewed Auto deploy war file (backdoor/shell) to particular folder
Apr
10
reviewed No Action Needed Can we create custom APDU for non-smart (memory type) contactless card?
Apr
10
reviewed No Action Needed Why not ask for a password and 2-factor token at the same time?
Apr
9
comment Digital signature based authentication schema using two passwords
You might want to look at Yaksha. or at dynamic reauthorization/risk based authorization. They're both simpler than what you suggest, and less susceptible to compliance rot.
Apr
4
comment How many bits of entropy should I aim at for my password?
For what purpose? Are you protecting your preferences on a news site, or are you protecting the secrets of the universe? Security is a slider switch, not a toggle.
Apr
1
answered IDS in combination with vulnerability scanner
Mar
28
revised How exactly are physically unclonable functions used in authenticaton if they are unclonable?
wikified tertm
Mar
28
comment How exactly are physically unclonable functions used in authenticaton if they are unclonable?
. . . the hardware analog of a one-way function. One way/Trap door functions have a clear role in authentication; the wikipedia page explains the rest.
Mar
28
suggested suggested edit on How exactly are physically unclonable functions used in authenticaton if they are unclonable?
Mar
26
comment Using pattern matching to make a port more secure
regex matching against the request is at the application layer; ports are a transport layer artifact. I'm not sure that I understand your request.
Mar
20
comment A clear definition for procedural security controls?
Yes. Google will tell you that controls are technical, management and operational.