151 reputation
5
bio website
location Canberra, Australia
age
visits member for 2 years, 5 months
seen Jun 15 '13 at 1:38

Information Security Expert

In depth experience in banking / retail transaction technology, with focus on devices, multi-tier architecture, and security (PCI, ISO stds).

Long term software designer, with periodic stints in systems administration (Solaris, Linux) and infrastructure troubleshooting (Windows, Solaris, Linux).

Specialties:

Strategic Planning, Problem Solving, Change Management, IT Governance/Audit, Product Development, Infrastructure Hardening

Long term research:

  • Information Security policy: staff use, compliance, governance, legislation, privacy, and disclosure
  • trend analysis: IT corporate, office productivity software, mobility, encryption, and biometrics.
  • Mozilla Firefox (browser): development, end-user support, testing, and cross-platform (Windows, Linux)
  • Mozilla Thunderbird (email), Mozilla Lightning (calendar): development, end-user support, testing, and cross-platform (Windows, Linux); libical / calsify library code; RFC 5545 (iCalendar) and RFC 5546 (iTIP) standards
  • Apache OpenOffice / LibreOffice, Open Document Format (ODF): development, end-user support, testing, and cross platform (Windows, Linux)

Oct
19
awarded  Commentator
Oct
19
awarded  Critic
Oct
19
comment Bank forces me to use six character alphanumeric password
I have used Westpac (Australia) web-based banking. And I used a longer password than just 6 characters. It only showed a '*' for the first six, but still required all of the passkey.
Oct
16
revised How could an AV detect a virus that has a chance of not decrypting itself?
corrected spelling, correct sentence construction
Aug
11
answered How could an AV detect a virus that has a chance of not decrypting itself?
Jan
28
comment if the hypervisor is hacked are all guests affected as well?
Compromised? YES; Affected? Who knows. "Compromised" means risk, "Affected" is more vague ..
Dec
2
answered When storing private identifying information in a web application, what is “industry standard” best practices?
Nov
24
comment Using EventStore For PCI Compliance?
Can you provide any of your selection criteria, or identify which specific sections of PCI-DSS you need to be audited on.
Nov
24
comment Computer team's password change time different from other users?
I have generally two levels of enforceable IT policy: one for ALL users (Acceptable Use), and a much more strict one for higher privileged staff (IT Security Policy). The privileged staff include: systems administrators, 3rd level helpdesk, DBA's, audit, security staff, etc.
Nov
24
comment Computer team's password change time different from other users?
You are missing password history (prevent re-use, eg. A to B to C, back to A).
Nov
24
comment Computer team's password change time different from other users?
You are missing password complexity (letters, numbers, and/or symbols). An 8 character password if quite weak, especially for Windows. Have a look at NIST guidelines for your platform (eg. Windows, smart-phone, server, etc.)
Nov
22
awarded  Teacher
Nov
21
awarded  Editor
Nov
21
revised Best way to push data to a client without being blocked by firewall
added clarity
Nov
21
comment Best way to push data to a client without being blocked by firewall
Re-worded for you.
Nov
21
answered Best way to push data to a client without being blocked by firewall
Nov
21
comment Best way to push data to a client without being blocked by firewall
Can you add some further details? How many clients, over Internet, how much traffic, streaming, packet loss, etc. Is this time critical (latency) for near-real-time, etc.
Nov
21
awarded  Supporter
Nov
21
comment Mac sending hundreds of packets to gateway
I've experienced far worse with: (a.) the first Windows 7 PC added to a department, and (b.) adding a 'workgroup' and ANY windows PC to a Linux cluster of machines. And NO, they did not appear to be infected OR incorrectly behaving.