network profile
| bio | website | |
|---|---|---|
| location | Germany | |
| age | 36 | |
| visits | member for | 1 year, 5 months |
| seen | Apr 5 at 7:23 | |
| stats | profile views | 10 |
|
Mar 21 |
awarded | Scholar |
|
Mar 21 |
accepted | State before getting whitelisted? |
|
Mar 20 |
answered | State before getting whitelisted? |
|
Mar 20 |
comment |
State before getting whitelisted? Yes, sorry, meanwhile I've found some more hints. I'll add an answer that sums up my findings in a few minutes. |
|
Mar 20 |
comment |
State before getting whitelisted? I heard the term "sanitization" before, but connected it more to the process of cleaning individual parameters or values. I've now looked after it but I think it does not fit exactly. See my update to the question. |
|
Mar 19 |
comment |
State before getting whitelisted? Thanks for your input, too! I assume you mean "un-sanitized" (typo)? Could you provide some links where this term was used? |
|
Mar 19 |
awarded | Student |
|
Mar 14 |
comment |
State before getting whitelisted? Hey Tom, thanks for your input! I've thought of Greylisting before but am quite unsure. A greylisted sender is an entity who is actively denied, albeit temporarily. I'm more looking for a term that describes an untrusted message that just comes in. Maybe "untrusted" is good already but I assume there's some nifty vocabulary out there ... |
|
Mar 14 |
asked | State before getting whitelisted? |
|
Nov 28 |
awarded | Yearling |
|
Jul 19 |
comment |
PCI Compliance network scope What exact "access" do the developers need to staging & production? If it is no more than other staff has and limited to documented procedures it may be ok. Everything beyond: look at "separation of duties" topics in PCI DSS. The developers will not be allowed to be the ones deploying their own applications. Here's a similar topic: security.stackexchange.com/questions/12962/… |
|
Jul 18 |
comment |
PCI Compliance network scope Let's assume 4 parts: dev, testing, staging, production. You could develop and fully test your applications in dev and testing. A release gets deployed to the staging environment which can run "on the production hardware". Staging must then be handled exactly like the production environment. |
|
Jul 18 |
answered | PCI Compliance network scope |
|
Jul 17 |
answered | I want to have the security of my crypto code checked, how should I go about doing so? |
|
Jul 17 |
comment |
What are the most common files to check with File integrity monitoring software? have a look at what tools like chkrootkit, tiger, rkhunter do -- basically you should check almost everything that is not intended to change |
|
Dec 16 |
awarded | Supporter |
|
Dec 12 |
comment |
Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL Swader: see also security.stackexchange.com/questions/9411/… -- When using PHP you could use some volatile storage for storing your password only in RAM (e.g. memcache). But take measures to protect this service. |
|
Dec 8 |
answered | Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL |
|
Dec 5 |
awarded | Analytical |
|
Dec 5 |
answered | DB Passwords: More Secure in a PHP App's .ini config files or apache2 environment variables? |
