21,017 reputation
33982
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 42 mins ago

Security Architect


1d
comment SFTP on Windows - is it likely to be disabled?
SSH and SFTP is not standard, so the user would have to install something. The defaults in place will be up to the program they use.
1d
revised ISO27001 and Linux/Ubuntu
deleted 8 characters in body
1d
reviewed Close Different types of DDoS attacks
1d
comment Different types of DDoS attacks
There is a lot of data available on this. Have you done research?
1d
reviewed Close How does a person fully secure his home IT infrastructure
1d
reviewed Close Affordable FIM, log monitoring, policy enforcement/checking, IDS?
1d
comment Affordable FIM, log monitoring, policy enforcement/checking, IDS?
Unfortunately, product recommendations are off-topic here. Product reviews are available online.
1d
reviewed Close MPR I suppose somehow I found a way to make a super hacker angry with me
1d
comment MPR I suppose somehow I found a way to make a super hacker angry with me
There's a lot of odd details in this question. What are you really asking?
1d
reviewed Close Setting the HTTPOnly flag for PHPSESSID cookie
1d
reviewed Close I can't copy files from a HDD, do I need permission from my own account?
1d
reviewed Close What is this? Virus or scanner?
1d
comment Tools to demonstrate NO storage of cardholder data
Thank you for your edit.
1d
comment Tools to demonstrate NO storage of cardholder data
Cardholder data isn't the only kind of data that needs protection: pcisecuritystandards.org/pdfs/pci_fs_data_storage.pdf
2d
comment Tools to demonstrate NO storage of cardholder data
that tool only does PAN - the OP specifically says they have tools for PAN but not the rest of the data
2d
comment Bad password policy at my bank
"2FA requires not only a password and username but also something that only, and only, that user has on them, i.e. a piece of information only they should know" - knowledge is only one factor. 2FA, where the second factor is actually a second factor (has/is), does effectively mitigate poor password problems. If you meant to say that pseudo-2FA does not mitigate, then you should say that.
2d
answered Why no self-hosted email? (Snowden, Lavabit, Hushmail, NSA)
2d
comment Why no self-hosted email? (Snowden, Lavabit, Hushmail, NSA)
Emails servers are also a pain to administer. It would be trivial to DoS the server with mild traffic.
2d
comment Why no self-hosted email? (Snowden, Lavabit, Hushmail, NSA)
If you follow all your steps, then you also create a single point of failure, and shout to the world exactly where your email is hosted.
2d
reviewed No Action Needed Could a compromised root CA impersonate any SSL certificate?