296 reputation
16
bio website
location Germany
age 37
visits member for 2 years, 11 months
seen Jul 31 at 16:31

Mar
21
awarded  Scholar
Mar
21
accepted State before getting whitelisted?
Mar
20
answered State before getting whitelisted?
Mar
20
comment State before getting whitelisted?
Yes, sorry, meanwhile I've found some more hints. I'll add an answer that sums up my findings in a few minutes.
Mar
20
comment State before getting whitelisted?
I heard the term "sanitization" before, but connected it more to the process of cleaning individual parameters or values. I've now looked after it but I think it does not fit exactly. See my update to the question.
Mar
19
comment State before getting whitelisted?
Thanks for your input, too! I assume you mean "un-sanitized" (typo)? Could you provide some links where this term was used?
Mar
19
awarded  Student
Mar
14
comment State before getting whitelisted?
Hey Tom, thanks for your input! I've thought of Greylisting before but am quite unsure. A greylisted sender is an entity who is actively denied, albeit temporarily. I'm more looking for a term that describes an untrusted message that just comes in. Maybe "untrusted" is good already but I assume there's some nifty vocabulary out there ...
Mar
14
asked State before getting whitelisted?
Nov
28
awarded  Yearling
Jul
19
comment PCI Compliance network scope
What exact "access" do the developers need to staging & production? If it is no more than other staff has and limited to documented procedures it may be ok. Everything beyond: look at "separation of duties" topics in PCI DSS. The developers will not be allowed to be the ones deploying their own applications. Here's a similar topic: security.stackexchange.com/questions/12962/…
Jul
18
comment PCI Compliance network scope
Let's assume 4 parts: dev, testing, staging, production. You could develop and fully test your applications in dev and testing. A release gets deployed to the staging environment which can run "on the production hardware". Staging must then be handled exactly like the production environment.
Jul
18
answered PCI Compliance network scope
Jul
17
answered I want to have the security of my crypto code checked, how should I go about doing so?
Jul
17
comment What are the most common files to check with File integrity monitoring software?
have a look at what tools like chkrootkit, tiger, rkhunter do -- basically you should check almost everything that is not intended to change
Dec
16
awarded  Supporter
Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Swader: see also security.stackexchange.com/questions/9411/… -- When using PHP you could use some volatile storage for storing your password only in RAM (e.g. memcache). But take measures to protect this service.
Dec
8
answered Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
Dec
5
awarded  Analytical
Dec
5
answered DB Passwords: More Secure in a PHP App's .ini config files or apache2 environment variables?