Reputation
693
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 9 24
Impact
~96k people reached

Mar
22
awarded  Notable Question
Dec
2
comment How do attackers find the IP addresses of recently deployed servers?
Pretty much the easier way to do this is just block all of China's IP ranges, and then block /24's or whatever of the other IP ranges trying to brute force. Or just turn off password based auth and use keys, and restrict what hosts are allowed to log into the box
Nov
21
comment Can malware be transmitted via a USB charger plugged into a wall socket?
@ott True for standard chargers, but false if you look at the X10 protocol or Power over Ethernet
Oct
27
accepted What is legally required to store HIPAA data in the “cloud”?
Aug
17
awarded  Good Question
Jul
29
comment Maximum number of nodes with IPSec?
What about broadcast addresses and all that jazz?
Jul
28
comment What is legally required to store HIPAA data in the “cloud”?
Thank you, I appreciate the help. Do you have a source for the encrypted data being stored on AWS, or a decent website I can read about HIPAA in general? Most of the websites I have found are just bits and pieces.
Jul
27
asked What is legally required to store HIPAA data in the “cloud”?
Jul
24
awarded  Caucus
Jul
1
awarded  Yearling
Jun
4
comment Confusion regarding PCI compliance in an office
+1, didn't know this applied to merchants as well (although it makes sense). Is there a set of simplified guidelines that merchants should follow, or just take the PCI-DSS guidelines and apply everything applicable?
Mar
16
comment What is a key-hardened hash?
@Wrycu When a secret key is included in the salt, it can be called pepper - "Some people advice to add a secret key into the mix (sometimes called 'pepper'). Where the pepper is a secret, high entropy, system-specific constant." ( security.stackexchange.com/questions/3272/… )
Mar
7
comment Is it possible to redirect someone to a fake site without changing the hosts file?
highjack dns, dns cache poisoning, I've seen a few people swear they typed a url correctly (one letter off) and went to the wrong site, etc.
Mar
3
comment How to make undetectable malware
Write really good malware
Jan
9
comment Origins of the “man-in-the-middle” analysis
All students that I know are not in school at the moment ;)
Jan
6
awarded  Popular Question
Jan
1
comment Is Truecrypt still safe?
You can still download TrueCrypt via sourceforge.
Dec
30
comment MS08_067 with Metasploit
did you turn off the firewall?
Dec
20
accepted Improving magnetic stripe card security with a “magnetic noise” hash?
Dec
20
awarded  Excavator