1,016 reputation
214
bio website cfcausa.org
location Kansas City
age 29
visits member for 1 year, 8 months
seen 3 hours ago
stats profile views 11

Systems Security Engineer for CFCA, a non profit organization.

Want to help someone living in poverty? Check us out at www.cfcausa.org.


Dec
31
asked Backup server categorization in the Open PCI Scoping Toolkit
Dec
21
revised How should an outgoing connection white-list be created?
added 178 characters in body
Dec
20
answered How should an outgoing connection white-list be created?
Dec
18
asked PCI-DSS - one application per server?
Dec
7
asked Configuring IIS SSL for PCI
Dec
7
comment IIS 6.0 - mitigating BEAST
@Thomas - I'd love to see an example of turning off these ciphers. We're getting failed on our audit for the same reason. It's an old Exchange 2003 box and we're getting failed for our SSL encrypted SMTP rules.
Dec
7
revised A bit confused about PCI compliance
added 53 characters in body
Dec
7
revised A bit confused about PCI compliance
deleted 1 characters in body
Dec
7
revised A bit confused about PCI compliance
deleted 2 characters in body
Dec
7
answered A bit confused about PCI compliance
Nov
14
accepted Attack vectors opened simultaneous wireless and wired networks
Nov
14
comment Attack vectors opened simultaneous wireless and wired networks
Thanks D.W. - that is what I was thinking but I wasn't familiar enough to be sure.
Nov
14
revised Attack vectors opened simultaneous wireless and wired networks
Made the question more succinct.
Nov
14
comment Attack vectors opened simultaneous wireless and wired networks
Helpful, thanks. What I'm looking for is some help with the analysis of what kind of threats are created specifically from having both connections active at the same time. I'll revise my question body to reflect this. Any assumptions it looks like I've made are accurate to my situation.
Nov
14
comment Attack vectors opened simultaneous wireless and wired networks
Thanks. The networks in question would make be totally independent other than the laptops
Nov
14
comment Attack vectors opened simultaneous wireless and wired networks
@asudhak - there are zero days which can run arbitrary code, including reverse connections to open consoles. From there the routing commands would be easy.
Nov
13
accepted Disable DES-CBC-SHA in schannel
Nov
13
asked Attack vectors opened simultaneous wireless and wired networks
Oct
23
awarded  Commentator
Oct
23
comment What are the security or privacy issues with allowing users to forward email from our Google Apps account to their personal Gmail?
Wasn't the answer you received on serverfault an hour ago good enough? serverfault.com/questions/441449/…