1,178 reputation
411
bio website levii.com
location
age
visits member for 3 years, 4 months
seen Jan 6 at 17:58

Oct
15
answered attack/abuse notification email template
Oct
1
comment Digital Signature and Verification?
Correct. The private key is always used for the sensitive part of the operation (encrypting a message hash for signing, or decrypting a message intended for a specific person)
Sep
28
comment PCI-DSS compliance for business with only swipe terminals
Move your swipe terminals to a separate network (can be logically segmented) compliance at that point since you're on a single purpose system/single purpose network with a PCI L1 provider doing the processing should make you eligible for the shortened self-assessment: pcisecuritystandards.org/documents/pci_saq_a_v2.doc it's the place to look anyway (the site/docs)
Sep
27
comment How can I scan open ports without being traced back
Use proxychains or anything else similar to tunnel your traffic across the established tor connection: examples -- commondork.com/2009/06/26/tunneling-nmap-through-tor -- aldeid.com/wiki/Tor/Usage/Nmap-scan-through-tor
Sep
27
answered How can I scan open ports without being traced back
Sep
27
comment HTML 5 postMessage PCI compliant
You may want to check the source property as well: developer.mozilla.org/en-US/docs/DOM/window.postMessage ... I'd also ensure that an application firewall is in place to monitor and filter these requests.
Sep
27
answered HTML 5 postMessage PCI compliant
Sep
21
comment What defines a programming language as useful for hacking?
I can't tell you how much I hate debugging PERL though ... at least the Eclipse PERL debugger is pretty good :) It is good for knocking something out quick - but like LISP; it just hurts my brain.
Sep
21
awarded  Critic
Sep
21
comment What defines a programming language as useful for hacking?
+1 since largely the capability for re-use of existing frameworks is the single largest benefit. I can certainly write apps to pen-test in any language, but not-having to reinvent the wheel (and not having to compile) gives directly executed languages a bit of a benefit
Sep
21
comment Why is php not used for banking sites or for a banking transaction?
Java and SQL server, or C# and Oracle are used often. The database is (or at least should be) irrelevant to the development language.
Mar
5
asked Changing windows client form values at runtime
Dec
15
awarded  Yearling
Nov
30
answered What is your way to create good passwords that can actually be remembered?
Nov
22
comment Best efficient windows hardening audit script
Well, I can't think of anything solid out there other than MBSA for the moment, but it does look like MSFT and NIST are teaming up with some SCAP/OVAL cmdlets for powershell scap.nist.gov/events/2011/itsac/presentations/day2/… , services.nvd.nist.gov/jira/browse/SCAPDEV-1
Nov
21
comment Best efficient windows hardening audit script
Is there any reason you can't use a third party set of tools? SCAP (security content automation protocol) is designed specifically to do this with various policies and benchmarks.
Nov
17
answered Any place where I can find some template or base documents for IT/Infosec Compliance?
Oct
2
awarded  Nice Question
Aug
30
revised Monitoring file access on Windows
Fix typo
Aug
30
revised Monitoring file access on Windows
Fix typo