34,579 reputation
462121
bio website cloud101.eu
location Belgium
age 25
visits member for 3 years, 8 months
seen 7 hours ago

I'm a security analyst and consultant, I'm here to learn and help others out.

Opinions are my own. Advice provided with no warranty.

Find me on http://cloud101.eu

Aviiiiiiiiiiiiiiiiiiiiiiid, Aviiiiiiiiiiiiiiid.


2d
comment Best practices for encryption from web<-> specific client
Per client key. That's the best practice.
2d
answered Best practices for encryption from web<-> specific client
Mar
28
reviewed Leave Closed Exploiting snmp private string
Mar
28
reviewed Leave Open External websites in logs
Mar
28
reviewed Close Software company possibly spying
Mar
26
comment Website being probed from the Ukraine
Did you just copy stackexchange on your little startup website :P?
Mar
26
comment Website being probed from the Ukraine
Well at least look a bit into security management, what you should log, where you should log it, what type of data you are saving (especially if you plan on processing credit card data or personal data).
Mar
26
comment Website being probed from the Ukraine
You mean you didn't perform security testing before you placed your website into the hostile environment we know as the Internet? Hire a security firm to review your website's code and your configuration. Get a HIDS. Block entire countries if you don't plan on doing business with them.
Mar
24
comment In DNSSec, are Delegation Signer Records always SHA-1?
To the Thomas Pornin mobile!
Mar
23
answered What are you doing if you notice a MITM attack against a Linux server?
Mar
22
answered Is it unwise to use Redis to store PII, private keys, and other secrets?
Mar
20
awarded  Favorite Question
Mar
20
accepted Historical events in terms of risk assessment
Mar
19
comment Historical events in terms of risk assessment
Yes, that's what the question establishes, I need to know which categories can be defined of historical events in regard to a risk assessment.
Mar
19
asked Historical events in terms of risk assessment
Mar
12
revised Opening port 53 on server Risks?
added 32 characters in body
Mar
12
answered Opening port 53 on server Risks?
Mar
11
comment Secure software development checklist
I'm outspoken in saying: if you think memory safe languages don't have security caveats, you should have a look at the above.
Mar
11
comment Does PCI compliance requires DRP even if we dont store Card data
Incident response is your plan on what you do in case of a breach. What if someone managed to install malware on one of your desktops? What if you have a virus? etc...
Mar
11
comment Does PCI compliance requires DRP even if we dont store Card data
You need a disaster recovery plan in regard to incident response, you don't need a site. What you do with your business is your problem, the thing PCI wants to maintain is secure storage of your PCI data.