1,304 reputation
721
bio website cfcausa.org
location Kansas City
age 30
visits member for 2 years, 7 months
seen Apr 14 at 0:25

Systems Security Engineer for Unbound, a non profit organization.

Want to help someone living in poverty? Check us out at www.unbound.org.

Want to get linkedin?


May
6
comment What does having an internal two-tier PKI protect against?
@MDMarra - even an online responder needs a source for the OCSP data. Once compromised you can't expect the online ca to provide it. Unless I'm mistaken that also needs to come from the offline CA being higher up the hierarchy.
May
6
answered Using Tor from behind a Proxy (like Burp Suite)
May
2
answered How to figure out if someone has been using TeamViewer 8 to access my computer when I was not here?
May
1
answered What logs to retain for PCI-DSS?
Apr
9
answered What does having an internal two-tier PKI protect against?
Mar
30
answered Secure OS deployment
Mar
29
answered PCI DSS 11.2.1/11.2.3 - Internal scans scope
Mar
22
comment How would you detect whether customer data has been leaked?
@D.W. - I saw a three year term for one of the vendors I looked at. Thought about actually marketing doing this as a support feature with a 1, 2, or 3 year term.
Mar
19
answered How would you detect whether customer data has been leaked?
Mar
6
comment Normalizing Windows Advanced Firewall rules
The rules are based on security groups in Active Directory, not subnets. There isn't a way for a given IP (windows and joined to our domain or otherwise) to get access without successful authentication (by being a member of the approved group in AD).
Mar
5
revised Normalizing Windows Advanced Firewall rules
Missing the IPSEC tag (part of Windows Advanced Firewall)
Mar
5
comment Normalizing Windows Advanced Firewall rules
Once segmented only Windows systems would be part of the cardholder environment. By using Windows Advanced Firewall + IPSEC it isn't possible for non authenticated systems (my Linux and OSX boxes included) to access the cardholder environment.
Mar
1
asked Normalizing Windows Advanced Firewall rules
Feb
22
comment Preventing artificial latency or “Lag Hacking” in multiplayer games
Wow.. The topology you're describing is a whole lot like how Netflix handles its streaming video deployment. Would never have thought about using it as an anti cheating mechanism. Basically the same premise just with CPU power instead of disk space. I've been wondering about the same issues Root outlined for years. Very well stated.
Feb
2
answered Can change management for PCI compliance be accomplished via simple emails?
Jan
24
awarded  Popular Question
Jan
15
awarded  Nice Question
Jan
3
awarded  Mortarboard
Jan
2
accepted PCI-DSS - one application per server?
Dec
31
asked Backup server categorization in the Open PCI Scoping Toolkit