1,955 reputation
924
bio website cfcausa.org
location Kansas City
age 31
visits member for 3 years, 6 months
seen Mar 25 at 3:23

Systems Security Engineer for Unbound, a non profit organization.

Want to help someone living in poverty? Check us out at www.unbound.org.

Want to get linkedin?


May
29
asked Is there more risk in changing administrator password locally vs from a centralized location?
May
19
accepted Attacks to jump from SQL server to Web server, without direct network access?
May
19
comment Attacks to jump from SQL server to Web server, without direct network access?
Great input. I was thinking some kind of memory based attack against the app server. A client side attack against an admin user is a vector I had not considered.
May
16
asked Attacks to jump from SQL server to Web server, without direct network access?
Mar
24
awarded  Popular Question
Mar
18
awarded  Good Answer
Feb
14
answered How do I solve a lot of Failure Audit (529 680) which are appearing in event viewer “Security” tab?
Feb
13
answered Make firewall management public?
Feb
3
awarded  Enlightened
Feb
3
awarded  Nice Answer
Jan
27
asked Suppressing broadcast traffic in honeyd logs?
Nov
8
awarded  Notable Question
Sep
13
awarded  Popular Question
Sep
9
awarded  Yearling
Sep
5
comment Do we need to use separate IP ?
I hate to disagree but there are a lot of 'firewalls' that actually have level 7 inspection capability, especially for HTTPS. If that's the case and and the decrypted cardholder data is in memory the firewall is in scope. That is an easy point for folks to get confused on and it took a couple reads to get that from your post.
Aug
23
comment Encryption key exchange for Tor
@Adnan not the circuit building so much - the post I linked to does a good job with that - but some additional details on how the key exchange process works would be much appreciated.
Aug
22
awarded  Excavator
Aug
22
revised Disable DES-CBC-SHA in schannel
Clarity between IIS 6 and 7.x
Aug
22
suggested approved edit on Disable DES-CBC-SHA in schannel
Aug
22
revised Disable DES-CBC-SHA in schannel
Update for clarity on IIS 6 / 7.x