david6

151 reputation

bio	website
	location	Canberra, Australia
	age
visits	member for	1 year, 6 months
	seen	Oct 19 '12 at 21:24
stats	profile views	16

Information Security Expert

In depth experience in banking / retail transaction technology, with focus on devices, multi-tier architecture, and security (PCI, ISO stds).

Long term software designer, with periodic stints in systems administration (Solaris, Linux) and infrastructure troubleshooting (Windows, Solaris, Linux).

Specialties:

Strategic Planning, Problem Solving, Change Management, IT Governance/Audit, Product Development, Infrastructure Hardening

Long term research:

Information Security policy: staff use, compliance, governance, legislation, privacy, and disclosure
trend analysis: IT corporate, office productivity software, mobility, encryption, and biometrics.
Mozilla Firefox (browser): development, end-user support, testing, and cross-platform (Windows, Linux)
Mozilla Thunderbird (email), Mozilla Lightning (calendar): development, end-user support, testing, and cross-platform (Windows, Linux); libical / calsify library code; RFC 5545 (iCalendar) and RFC 5546 (iTIP) standards
Apache OpenOffice / LibreOffice, Open Document Format (ODF): development, end-user support, testing, and cross platform (Windows, Linux)

	151 reputation	bio	website		visits	member for	1 year, 6 months
5 badges		location	Canberra, Australia		seen	Oct 19 '12 at 21:24

summary answers questions tags badges favorites bounties reputation activity

20 Actions

suggestions reviews revisions comments badges posts accepts all

Oct 19	awarded	Commentator
Oct 19	awarded	Critic
Oct 19	comment	Bank forces me to use six character alphanumeric password I have used Westpac (Australia) web-based banking. And I used a longer password than just 6 characters. It only showed a '*' for the first six, but still required all of the passkey.
Oct 16	revised	How could an AV detect a virus that has a chance of not decrypting itself? corrected spelling, correct sentence construction
Aug 11	answered	How could an AV detect a virus that has a chance of not decrypting itself?
Jan 28	comment	if the hypervisor is hacked are all guests affected as well? Compromised? YES; Affected? Who knows. "Compromised" means risk, "Affected" is more vague ..
Dec 2	answered	When storing private identifying information in a web application, what is “industry standard” best practices?
Nov 24	comment	Using EventStore For PCI Compliance? Can you provide any of your selection criteria, or identify which specific sections of PCI-DSS you need to be audited on.
Nov 24	comment	Ubuntu home folder encryption, compared with file vault is this is package vs package discussion, or the underlying technology / encryption?
Nov 24	comment	Computer team's password change time different from other users? I have generally two levels of enforceable IT policy: one for ALL users (Acceptable Use), and a much more strict one for higher privileged staff (IT Security Policy). The privileged staff include: systems administrators, 3rd level helpdesk, DBA's, audit, security staff, etc.
Nov 24	comment	Computer team's password change time different from other users? You are missing password history (prevent re-use, eg. A to B to C, back to A).
Nov 24	comment	Computer team's password change time different from other users? You are missing password complexity (letters, numbers, and/or symbols). An 8 character password if quite weak, especially for Windows. Have a look at NIST guidelines for your platform (eg. Windows, smart-phone, server, etc.)
Nov 22	awarded	Teacher
Nov 21	awarded	Editor
Nov 21	revised	Best way to push data to a client without being blocked by firewall added clarity
Nov 21	comment	Best way to push data to a client without being blocked by firewall Re-worded for you.
Nov 21	answered	Best way to push data to a client without being blocked by firewall
Nov 21	comment	Best way to push data to a client without being blocked by firewall Can you add some further details? How many clients, over Internet, how much traffic, streaming, packet loss, etc. Is this time critical (latency) for near-real-time, etc.
Nov 21	awarded	Supporter
Nov 21	comment	Mac sending hundreds of packets to gateway I've experienced far worse with: (a.) the first Windows 7 PC added to a department, and (b.) adding a 'workgroup' and ANY windows PC to a Linux cluster of machines. And NO, they did not appear to be infected OR incorrectly behaving.