1,006 reputation
46
bio website
location
age
visits member for 3 years, 4 months
seen 2 days ago

Jul
27
awarded  Yearling
Jul
3
answered Temporarily suspending a Certificate Authority's Certiticate
Jul
3
comment Password database vs flat encrypted file
I agree with schroeder's philosophy. Certainly from an access control perspective, it would be best to have the ability to audit/revoke user access. It is likely worth the time, if this is an available option. I know, realistically, this is not always an available option.
Jul
3
answered Password database vs flat encrypted file
Jul
3
comment Digitally sign all outbound data
I know you are working on a protocol. Can you clean up your question a bit, there are some gaps that are in your head, which you've not communicated ... would make it a lot easier to help you. What do you mean outbound messages? Are you talking about e-mail or are you talking about another serialization scenario. Do you have control of the web site in question? If not, I don't think anyone could say for certain which websites are going to react to extraneous data or not.
Jul
2
answered Storing CVC / CVV / CVV2 until payment is processed
Jan
10
answered Required skills before jumping into vulnerability research
Dec
18
answered How do I securely separate a wireless subnet from the wired network?
Dec
18
awarded  Commentator
Dec
18
comment How do I securely separate a wireless subnet from the wired network?
I don't think most cable modems are full featured enough to do what you're asking. You may want to look at adding a router. This would not be a bad idea regardless of how you end up architecting your network. Everything behind your router would be yours and physically changing ISPs would not alter your "back of house." You could do it with a Layer-3 switch (which is what a router is) but buying a router would be a cheaper solution. Could look at setting up a UTM with a spare PC also; like untangled or endian
Dec
10
answered MiTM attacks SSL to SSL
Sep
6
comment How do I deal with a compromised server?
Yes, if they are making a decision based on some certain risk factors or criteria, I am all for that. I would just hope to emphasis that panicking and hastily unplugging may do more harm than good.
Sep
5
answered Does a rewritten file on NTFS use the same blocks?
Jul
27
awarded  Yearling
Jul
19
answered How do I deal with a compromised server?
Jul
19
comment How do I deal with a compromised server?
That is one of the most concise and thoughtful explanations on the general actions of what to do once you've found out that your systems have been compromised that I've ever read.
Jan
11
answered What are some of the worst DBMS for finical software, and why?
Sep
7
answered SIEM technology is it database friendly?
Aug
28
answered Learning IT Security while being paid
Aug
15
answered What would be a good way to guarantee security of theft and loss of sensitive data in a shared rack?