601 reputation
1723
bio website
location
age
visits member for 3 years, 6 months
seen 8 hours ago

Jul
1
awarded  Yearling
Jun
4
comment Confusion regarding PCI compliance in an office
+1, didn't know this applied to merchants as well (although it makes sense). Is there a set of simplified guidelines that merchants should follow, or just take the PCI-DSS guidelines and apply everything applicable?
Mar
16
comment What is a key-hardened hash?
@Wrycu When a secret key is included in the salt, it can be called pepper - "Some people advice to add a secret key into the mix (sometimes called 'pepper'). Where the pepper is a secret, high entropy, system-specific constant." ( security.stackexchange.com/questions/3272/… )
Mar
7
comment Is it possible to redirect someone to a fake site without changing the hosts file?
highjack dns, dns cache poisoning, I've seen a few people swear they typed a url correctly (one letter off) and went to the wrong site, etc.
Mar
3
comment How to make undetectable malware
Write really good malware
Jan
9
comment Origins of the “man-in-the-middle” analysis
All students that I know are not in school at the moment ;)
Jan
6
awarded  Popular Question
Jan
1
comment Is Truecrypt still safe?
You can still download TrueCrypt via sourceforge.
Dec
30
comment MS08_067 with Metasploit
did you turn off the firewall?
Dec
20
accepted Improving magnetic stripe card security with a “magnetic noise” hash?
Dec
20
awarded  Excavator
Dec
20
revised Improving magnetic stripe card security with a “magnetic noise” hash?
I hope I didn't edit this too much - I think I understood his statement, and I tried to elaborate on it to make it clearer
Dec
20
suggested approved edit on Improving magnetic stripe card security with a “magnetic noise” hash?
Dec
19
comment How to securely store SSN details in a database while maintaining searches?
Please read: serverfault.com/questions/162214/… .. i.e. "if located in the United States, you will likely be subject to state and federal laws by storing the social security number and I would suggest you treat it as PCI scope data."
Dec
19
revised Are Facebook, Yahoo, Google, etc. hackable?
deleted 987 characters in body
Dec
19
comment Is it possible to cause a DOS attack on a domain by spoofing the DC's NTP request?
Thanks for the info - as an AD / server newbie, I didn't know about authenticated time or quorum-counting
Dec
19
accepted Is it possible to cause a DOS attack on a domain by spoofing the DC's NTP request?
Dec
19
comment Does sending credit card info over email violates PCI DSS?
Living in the US, I have NEVER had a company ask for credit card information over email - and I shop online frequently. Move to a different company now, and are you sure it is even a legitimate company?
Dec
19
comment Powershell opened up, switched to administrator mode and ran scripts all without me touching my computer. How worried should I be?
If you know what time it was, it may be helpful to look through your PCs event logs
Dec
18
comment Is Linux's 'W' command a security breach?
fwiw when I do w on a machine I'm logged into twice, it says the other session is [priv] (running Debian)