21,446 reputation
34777
bio website
location
age
visits member for 3 years, 10 months
seen 9 hours ago

Security, Unix, and Networking jack-of-all-trades, master-of-some.


May
23
awarded  Enlightened
May
22
awarded  Nice Answer
May
22
revised Does altering characters of a file url lead to another file?
Updated to reflect good point in comment
May
22
answered Does altering characters of a file url lead to another file?
May
21
revised card.io & PCI DSS v3.0
Fixed brain-o that put A-EP people into C or D.
May
20
comment Generic term for certificates and keys
Yes - "stuff" covers it.
May
20
comment What is Logjam and how do I prevent it?
The link you've provided is a pretty complete answer to your question, including the "What should I do?" section.
May
17
comment How can American Express Serve login be PCI-DSS compliant?
Are you sure it isn't just checking length? If you enter the wrong character in the 2nd character you type, does it behave differently than if you enter the correct character?
May
14
comment Why will Google no longer allow me to end or begin passwords with a space?
On Google's end of the wire, that's true. On our end of the wire, it isn't. It's the user that's potentially negatively impacted by the whitespace, not Google.
May
14
comment Why will Google no longer allow me to end or begin passwords with a space?
@Iszi because in contexts where you don't have ' or " at either end, you can't tell the difference. For example, a password stored in KeePass where you can reveal the text, or if pasted into notepad (we've all done it) temporarily. Spaces and newlines are both whitespace to humans.
May
14
comment Why will Google no longer allow me to end or begin passwords with a space?
@Iszi, agree that only Google can speak to intentions, but the there might still be a valid question here helping people understand what drives password limitations - just like the use of traditional DES password hashes imposed an 8-character limit on passwords. Just 2 cents.
May
14
answered Why will Google no longer allow me to end or begin passwords with a space?
May
13
answered Is there a fine for not doing penetration / vulnerability test
May
12
revised Is PCI SAQ A or A-EP applicable for my use case?
Updated based on specific product info and more asking around.
May
12
comment Apache server chooses TLS1.2 for all request even when TLS1.2 is disabled in IE9 / Windows7
Grab a packet capture and look at the CLIENT HELLO (which is unencrypted). I think you'll find that IE9 is willing to talk TLS 1.2 even when you tell it not to.
May
12
revised Is PCI SAQ A or A-EP applicable for my use case?
added 262 characters in body
May
12
revised Analyzing log files for forensics homework?
Not disk image forensics, log file forensics.
May
12
revised Is PCI SAQ A or A-EP applicable for my use case?
added 594 characters in body
May
11
answered Is PCI SAQ A or A-EP applicable for my use case?
May
9
comment Forensics - trace back DNS query origin on host?
If you mean historically - this happened already and you want to figure out who queried - then no, there's no way.