Reputation
2,372
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
14 26
Impact
~131k people reached

Jul
21
comment Using Free AV to meet PCI Requirement 5
@schroeder precisely my thought. :)
Jul
21
answered Using Free AV to meet PCI Requirement 5
Jul
17
answered Are there any reasons for using SSL over IPSec?
Jul
2
comment Industry average for security as a percentage of product budget?
The range is from 0-100%, depending on industry being sold to and the nature of the product. You are going to need a lot more detail if you want a more detailed response.
Jul
2
awarded  Curious
Jun
27
comment How to safely show some text on a webpage?
@AndrewHoffman true but that doesn't cover getting your authentication securely to the server... If someone gets your authentication token you now have someone else with access. I suppose I could have clarified that a bit.
Jun
27
answered How to safely show some text on a webpage?
Jun
22
revised What's there to harden for a home Unix-box behind Comcast cable modem?
added 331 characters in body
Jun
22
answered What's there to harden for a home Unix-box behind Comcast cable modem?
Jun
19
answered Are Extended Validation certificates any more secure than regular ones?
Jun
19
answered Is there a website or other resource that lists operating systems/platforms and the included root certificates?
Jun
16
accepted Identical lanman hashes on AD accounts?
Jun
16
revised Identical lanman hashes on AD accounts?
added 564 characters in body
Jun
16
asked Identical lanman hashes on AD accounts?
Jun
12
comment How to store credit card information for repeated transactions and still be PCI compliant?
@Timee's disclaimer is just plain wrong. If the cardholder information isn't in RAM at some point it wasn't transmitted to the server in question. If a server doesn't transmit, store or process cardholder data it isn't in scope.
Jun
11
revised honeyd is still a good alternative?
added 313 characters in body
Jun
11
answered honeyd is still a good alternative?
Jun
11
answered Is there more risk in changing administrator password locally vs from a centralized location?
Jun
9
answered Is a PCI scan required for LAN outer firewall with no open ports?
Jun
8
answered Are legal notices in a login banner legally significant in terms of computer misuse?