1,815 reputation
923
bio website cfcausa.org
location Kansas City
age 30
visits member for 3 years, 2 months
seen Nov 21 at 21:56

Systems Security Engineer for Unbound, a non profit organization.

Want to help someone living in poverty? Check us out at www.unbound.org.

Want to get linkedin?


Jun
16
revised Identical lanman hashes on AD accounts?
added 564 characters in body
Jun
16
asked Identical lanman hashes on AD accounts?
Jun
12
comment How to store credit card information for repeated transactions and still be PCI compliant?
@Timee's disclaimer is just plain wrong. If the cardholder information isn't in RAM at some point it wasn't transmitted to the server in question. If a server doesn't transmit, store or process cardholder data it isn't in scope.
Jun
11
revised honeyd is still a good alternative?
added 313 characters in body
Jun
11
answered honeyd is still a good alternative?
Jun
11
answered Is there more risk in changing administrator password locally vs from a centralized location?
Jun
9
answered Is a PCI scan required for LAN outer firewall with no open ports?
Jun
8
answered Are legal notices in a login banner legally significant in terms of computer misuse?
Jun
7
awarded  Nice Answer
Jun
6
revised How to store credit card information for repeated transactions and still be PCI compliant?
added 159 characters in body
Jun
6
comment How to store credit card information for repeated transactions and still be PCI compliant?
@Ivan - a lot of businesses aren't interested until they see how stiff the peanalties are. See edit.
Jun
6
comment How to store credit card information for repeated transactions and still be PCI compliant?
@JulianKnight - true. We use a method very similar in house. I didn't want to confuse the matter with the 'they' possibly being a dedicated team in the office.. That's a whole ball of wax on its own.
Jun
6
answered How to store credit card information for repeated transactions and still be PCI compliant?
Jun
6
comment Is there more risk in changing administrator password locally vs from a centralized location?
@longneck - it doesn't meet all my requirements.
Jun
6
awarded  Civic Duty
Jun
6
answered List of upgradable softwares vulnerable to MitM attacks
May
29
asked Is there more risk in changing administrator password locally vs from a centralized location?
May
19
accepted Attacks to jump from SQL server to Web server, without direct network access?
May
19
comment Attacks to jump from SQL server to Web server, without direct network access?
Great input. I was thinking some kind of memory based attack against the app server. A client side attack against an admin user is a vector I had not considered.
May
16
asked Attacks to jump from SQL server to Web server, without direct network access?