meta user
network profile
| bio | website | cfcausa.org |
|---|---|---|
| location | Kansas City | |
| age | 29 | |
| visits | member for | 1 year, 8 months |
| seen | 11 hours ago | |
| stats | profile views | 11 |
Systems Security Engineer for CFCA, a non profit organization.
Want to help someone living in poverty? Check us out at www.cfcausa.org.
|
May 12 |
comment |
User Account Control and outside processes @WChargin - correct |
|
May 12 |
answered | User Account Control and outside processes |
|
May 6 |
comment |
What does having an internal two-tier PKI protect against? @MDMarra - even an online responder needs a source for the OCSP data. Once compromised you can't expect the online ca to provide it. Unless I'm mistaken that also needs to come from the offline CA being higher up the hierarchy. |
|
May 6 |
answered | Using Tor from behind a Proxy (like Burp Suite) |
|
May 2 |
answered | How to figure out if someone has been using TeamViewer 8 to access my computer when I was not here? |
|
May 1 |
answered | What logs to retain for PCI-DSS? |
|
Apr 9 |
answered | What does having an internal two-tier PKI protect against? |
|
Mar 30 |
answered | Secure OS deployment |
|
Mar 29 |
answered | PCI DSS 11.2.1/11.2.3 - Internal scans scope |
|
Mar 22 |
comment |
How would you detect whether customer data has been leaked? @D.W. - I saw a three year term for one of the vendors I looked at. Thought about actually marketing doing this as a support feature with a 1, 2, or 3 year term. |
|
Mar 19 |
answered | How would you detect whether customer data has been leaked? |
|
Mar 6 |
comment |
Normalizing Windows Advanced Firewall rules The rules are based on security groups in Active Directory, not subnets. There isn't a way for a given IP (windows and joined to our domain or otherwise) to get access without successful authentication (by being a member of the approved group in AD). |
|
Mar 5 |
revised |
Normalizing Windows Advanced Firewall rules Missing the IPSEC tag (part of Windows Advanced Firewall) |
|
Mar 5 |
comment |
Normalizing Windows Advanced Firewall rules Once segmented only Windows systems would be part of the cardholder environment. By using Windows Advanced Firewall + IPSEC it isn't possible for non authenticated systems (my Linux and OSX boxes included) to access the cardholder environment. |
|
Mar 1 |
asked | Normalizing Windows Advanced Firewall rules |
|
Feb 22 |
comment |
Preventing artificial latency or “Lag Hacking” in multiplayer games Wow.. The topology you're describing is a whole lot like how Netflix handles its streaming video deployment. Would never have thought about using it as an anti cheating mechanism. Basically the same premise just with CPU power instead of disk space. I've been wondering about the same issues Root outlined for years. Very well stated. |
|
Feb 2 |
answered | Can change management for PCI compliance be accomplished via simple emails? |
|
Jan 24 |
awarded | Popular Question |
|
Jan 15 |
awarded | Nice Question |
|
Jan 2 |
accepted | PCI-DSS - one application per server? |
