1,342 reputation
625
bio website
location
age
visits member for 2 years, 10 months
seen Apr 14 at 0:15

Ask a question on the new Linguistics site on Stack Exchange.


Apr
12
awarded  Notable Question
Apr
5
awarded  Good Question
Sep
7
comment Does PCI ban using MD5 to store sensitive data?
@bobince: Reality is vague sometimes, but provides the chance for amazing answers too. Agree that what's defined as sensitive might change the meaning of what is strong, but at the same rate, there is rarely the case that non-sensitive data needs strong encryption. Further, really doubt that at a high-level that buckets of sensitive data might not be define, and as a result, a means of knowing if the encryption was strong enough. Any thoughts? Please feel free to post an answer, since it appears you understand the topic better than I, and I'm always open to selecting a better answer. Cheers!
Sep
5
comment Does PCI ban using MD5 to store sensitive data?
Welcome to Security.SE, and while I agree your answer is, as you say, is a bit off-topic, thank you for sharing your take too!
Sep
5
accepted Does PCI ban using MD5 to store sensitive data?
Sep
5
revised Does PCI ban using MD5 to store sensitive data?
added 29 characters in body
Sep
5
comment Does PCI ban using MD5 to store sensitive data?
Thanks! Just to be clear: (1) Are they required to provide the SOC 2 report to customers if asked, or you're suggesting this would likely be the location of the related specs and the vendor would only have to provide it as a courtesy if they felt so inclined. (2) Is there any test for "strong", because if this is strong that in my opinion makes PCI-DSS sound like a joke.
Sep
5
asked Does PCI ban using MD5 to store sensitive data?
Aug
8
awarded  Good Question
Jun
5
awarded  Yearling
Apr
12
awarded  Popular Question
Jan
12
awarded  Popular Question
Dec
14
awarded  Popular Question
Aug
23
accepted Fostering an environment where honesty and disclosure are valued
Aug
23
comment Fostering an environment where honesty and disclosure are valued
+1 @schroeder: Agree, thanks for the quick reply, and meaningful response. I've award you the bounty, and selected you as the answer, congrats!
Aug
23
comment Fostering an environment where honesty and disclosure are valued
Given tylerl hasn't respond to this question I'll ask you: what do you make of the difference between your answer and tylerl's answer? To me while they both point towards the mechanics of behaviour modification techniques, they're different. Do you believe they're difference answers, and if so, why? Ask because I'm attempt to decide who to give the bounty too. Thanks!
Aug
22
comment How to make an outbound request to users to update their passwords?
@Ramhound: Thanks for the feedback. Have you read the answers currently posted? Also, don't understand what the function of the "new password" would be, please explain more if possible. Again, thanks!
Aug
21
comment How to make an outbound request to users to update their passwords?
+1 @Jeff Ferland: Edit looks good to me, thanks!
Aug
21
comment How to make an outbound request to users to update their passwords?
Really don't have an answer in mind; guessing that answer would likely be based on practices in jurisdictions that require by law that users be notified. And yes, believe everyone that knows about password resuse would understand why a breach needs a notification.
Aug
21
revised How to make an outbound request to users to update their passwords?
deleted 7 characters in body