194 reputation
17
bio website ciderconsulting.com
location Minneapolis, MN
age
visits member for 3 years, 1 month
seen Mar 16 at 1:09

high five bmike

My name is Mike Bradshaw. Please contact me if I can be of assistance as one of the Moderators of Ask Different on Stack Exchange.

Note, If you are emailing for help answering your question as opposed to help with moderation of the site, be sure to send a link to the question. I can't answer every troubleshooting question here (my paying customers have priority). If you have an exceptionally tough problem to solve, I do love challenges. Help me help you by asking a stellar question.

I'm often in the chat rooms here, but I'm also very much on the twitter as @bmike.


Dec
20
comment Can webpages recognize that I saved my password?
Is there a "... and what next?" that makes this a IT security question rather than a Stack Overflow one?
Dec
20
revised How can I explain SQL injection without technical jargon?
Whether this one person's grandmother is a DBA or not spoils a great question with sex and age generalizations
Dec
20
suggested suggested edit on How can I explain SQL injection without technical jargon?
Sep
17
comment Software that encrypts the data before deleting it
The crux of the issue is it should be encrypted before it gets deleted. "Way before" as in at moment of first opportunity and well before it gets stored to disk.
Aug
24
awarded  Caucus
Aug
24
awarded  Constituent
Jun
28
comment Should usernames be kept secret?
So let me rephrase my idea. If you first asked for password and only allowed users to enter the username as a second step, would you tell everyone the password entered was valid? Would you broadcast the failed password before taking the user name, after the user name, or never only conceding that everything wasn't a perfect match.
Jun
26
comment Can home routers get infected?
I suppose if someone modified the software but didn't/couldn't save the changes to the flash, a reset would do. Why would you even risk is and not re-load everything if you suspect compromise?
Jun
26
answered Can home routers get infected?
Jun
25
awarded  Autobiographer
Jun
25
awarded  Citizen Patrol
Jun
24
comment PCI restrictions on using using (hashed) credit card number to identify a repeat customer?
Are you certain they are reading the account number? It might be easier to just read track 1 where your full name is stored and perhaps use the expiration date along with the airport and date to eliminate all the other John Smiths in the system to locate your travel record. See ANSI X4.16 on google for descriptions of all the data on that stripe.
Jun
24
awarded  Critic
Jun
23
comment Forensics on a SOHO router
I use SNMP and remote syslog - if you could show editing of the router logs, that sure would be an ideal smoking gun to prosecute trespassing, defacement and unauthorized access.
Jun
23
comment Forensics on a SOHO router
Could you be a little more specific? Forensics explains the inner workings of a device so that it's clear to all how tampering or how these bits that were downloaded, observed, depicted traces back logically and without any other explanation to the actions of an actor. Of course you you can prove someone used, accessed or modified your property the same as you could in the real world. There are myriad ways you can prove someone walked on your property. It's all about your tools and the specifics of the situation.
Jun
23
comment Should usernames be kept secret?
@symcbean Same reason I vote in first past the post elections even though I would design an instant runoff voting system if I had the chance. (this would be much better in a discussion room :-) :-)
Jun
23
comment Should usernames be kept secret?
Yes my view is it's a bad qualitative decision. If one expends so little effort to educate users and call center costs are not seen as a positive benefit of actually having a secure practice involving real people, then you've already lost. Just get rid of the user name field altogether as it's an engineering cost that you are going to nullify in practice. As a security professional I would make the case to do usernames right or not do it at all. (and if I lost that argument - that's a business decision I may have to live with, but doesn't change the reality from an IT Security point of view.)
Jun
23
awarded  Teacher
Jun
23
awarded  Editor
Jun
23
revised Should usernames be kept secret?
added 182 characters in body; added 9 characters in body