17,988 reputation
33868
bio website
location
age
visits member for 3 years, 8 months
seen 1 hour ago

Security, Unix, and Networking jack-of-all-trades, master-of-some.


Mar
25
reviewed Looks OK SSH key auth, but still need password for sudo?
Mar
25
comment SSH key auth, but still need password for sudo?
That's a creative solution.
Mar
25
reviewed Leave Closed WebGoat Ajax Security - DOM Injection exercise need help
Mar
24
awarded  Good Answer
Mar
24
awarded  Nice Answer
Mar
24
revised Need help deobfuscating malicious PHP
Clarified what "is", is.
Mar
24
answered Need help deobfuscating malicious PHP
Mar
24
awarded  Fanatic
Mar
23
answered Linux Updates to Shellshock
Mar
23
answered What is considered an acceptable, secure method of remotely connecting to a Linux system?
Mar
22
answered Would SQL Injection and Insecure Direct References be solved by using Row-Level Security and Per-User Connection Strings?
Mar
20
awarded  Popular Question
Mar
20
answered How to secure Epson Beamer?
Mar
20
awarded  credit-card
Mar
19
comment card.io & PCI DSS v3.0
I don't know of a document touching on images, but the PCI SSC came out clearly and said audio recording of cardholder data is subject to normal DSS scope, so I agree completely that images are unlikely to fly with a QSA.
Mar
19
comment Access only specific folders via SFTP
The lack of rich application-layer access control in SSH/SCP/SFTP is one of the biggest shames of the protocol, imho.
Mar
19
revised Sans security courses: How are self study courses certified?
Added more personal opinion as that seems useful here
Mar
19
answered Sans security courses: How are self study courses certified?
Mar
19
revised card.io & PCI DSS v3.0
Forgot to address last line.
Mar
19
revised card.io & PCI DSS v3.0
added 2 characters in body