2,005 reputation
1620
bio website budo.markcwallace.net
location United States
age 52
visits member for 2 years, 7 months
seen 18 hours ago

I'm currently studying Tomiki Aikido under Dr. Yoji Kondo, although I started in Yoshinkan aikido under Helton-Sensei. I'm also studying Taiji under D. Gilmer at StillwaterTaichi I'm informally studying jo and bokken.

When I'm not on the mat, I provide project management support to the the Identity, Credential, and Access Management program at a US Federal Cabinet agency, but I want to get back into risk management and computer security/information assurance.


Mar
23
comment Is it illegal to access a public file that contain private information?
He who represents himself has a fool for a lawyer, but he's smarter than the man who accepts legal advice from the internet.
Mar
19
comment Historical events in terms of risk assessment
Every risk assessment should be informed by history. There is no reliable way to estimate probability or impact without recourse to history.
Mar
19
comment How can I detect mode interface of other machine is promiscuous
Duplicate?
Dec
26
comment Lost CVV number automatically virus related?
I believe you're referring to the CVV number?
Dec
10
comment Creating a secure and encrypted e-mail service
You might want to take note that in most of those countries merely having an encryption key that is not shared with the government is a crime.
Dec
10
awarded  Excavator
Nov
21
revised How does WebID fit in the SAML picture?
wikified reference.
Nov
21
suggested approved edit on How does WebID fit in the SAML picture?
Nov
19
revised Is storing CVV compliant with PCI standards?
this isn't a question about "legal", it is a question about compliance.
Nov
19
suggested approved edit on Is storing CVV compliant with PCI standards?
Nov
11
comment How are 1x1 pixel images used in a malicious context?
tracking.
Oct
31
revised Reverse shell back door
Corrected spelling. (Bellow is a loud yell; below indicates direction.)
Oct
31
suggested approved edit on Reverse shell back door
Oct
31
comment encryption using two keys
Research key splitting.
Oct
24
comment Does the US government protect its physical internet lines in the US?
I feel the comment stream has become too complex and too detailed; my point is that OP's risk model is flawed - (a) you don't need to dig up a transmission line to do a MITM and (b) physical transmission lines are owned and secured by independent entities.
Oct
24
comment Does the US government protect its physical internet lines in the US?
Majority of traffic is mobile. Note that the % isn't really relevant to the point I'm trying to make - that the US government doesn't operate the fiber.
Oct
24
comment Does the US government protect its physical internet lines in the US?
Why would the US government monitor lines owned and operated by private corporations? And why would anyone monitor physical lines when the majority of internet traffic is sent over cell towers?
Oct
23
comment Why require new users to change password?
The user, and only the user, should be uniquely and wholly responsible for any action taken with that userID. If you know the password, you share responsibility if that account is used (for example) to commit a felony (or merely to sexually harass the office cat).
Oct
23
comment Why require new users to change password?
Not to mention the most frequent implementation I've seen involves the admin assigning the same new password to every new user. Which means the adversary has a huge crib for password guessing.
Oct
21
awarded  Electorate