1,705 reputation
823
bio website cfcausa.org
location Kansas City
age 30
visits member for 2 years, 10 months
seen 16 hours ago

Systems Security Engineer for Unbound, a non profit organization.

Want to help someone living in poverty? Check us out at www.unbound.org.

Want to get linkedin?


Jul
26
answered Formula Used in Qualitative Risk Scales
Jul
24
answered Inconsistant browser warnings for SSL
Jul
21
comment Using Free AV to meet PCI Requirement 5
@schroeder precisely my thought. :)
Jul
21
answered Using Free AV to meet PCI Requirement 5
Jul
17
answered Are there any reasons for using SSL over IPSec?
Jul
2
comment Industry average for security as a percentage of product budget?
The range is from 0-100%, depending on industry being sold to and the nature of the product. You are going to need a lot more detail if you want a more detailed response.
Jul
2
awarded  Curious
Jun
27
comment How to safely show some text on a webpage?
@AndrewHoffman true but that doesn't cover getting your authentication securely to the server... If someone gets your authentication token you now have someone else with access. I suppose I could have clarified that a bit.
Jun
27
answered How to safely show some text on a webpage?
Jun
22
revised What's there to harden for a home Unix-box behind Comcast cable modem?
added 331 characters in body
Jun
22
answered What's there to harden for a home Unix-box behind Comcast cable modem?
Jun
19
answered Are Extended Validation certificates any more secure than regular ones?
Jun
19
answered Is there a website or other resource that lists operating systems/platforms and the included root certificates?
Jun
16
accepted Identical lanman hashes on AD accounts?
Jun
16
revised Identical lanman hashes on AD accounts?
added 564 characters in body
Jun
16
asked Identical lanman hashes on AD accounts?
Jun
12
comment How to store credit card information for repeated transactions and still be PCI compliant?
@Timee's disclaimer is just plain wrong. If the cardholder information isn't in RAM at some point it wasn't transmitted to the server in question. If a server doesn't transmit, store or process cardholder data it isn't in scope.
Jun
11
revised honeyd is still a good alternative?
added 313 characters in body
Jun
11
answered honeyd is still a good alternative?
Jun
11
answered Is there more risk in changing administrator password locally vs from a centralized location?