Reputation
626
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
3 7
Newest
 Yearling
Impact
~41k people reached

  • 0 posts edited
  • 0 helpful flags
  • 26 votes cast
Apr
7
accepted Organizing results from netstat using find on Windows
Apr
7
asked Organizing results from netstat using find on Windows
Mar
19
awarded  Yearling
Mar
19
awarded  Yearling
Mar
19
awarded  Yearling
Aug
3
answered The email system is compromised - what can you do?
Aug
3
comment What are the go-to books on server security?
That depends, is there any regulation that is involved such as HIPAA or PCI compliance? What data will be kept and what basic infrastructure would be involved? Are you just looking for security just on the servers or also on teh other network devices such as workstations, routers, etc.
Jul
31
answered Any solution to passing a penetration test for an outdated php web application without upgrading the application?
Jul
31
comment How can I report PCI-DSS violations?
The link is blank but is probably being filtered from where I'm at. If the password is being emailed in plain text it MIGHT not be a violation depending on legal requirements. HIPAA for example only requires TLS encryption from point A to point B. Luxsci email encryption tests if it is or not prior to sending and if not available then they encrypt it them selves. Check out luxsci.com/extranet/tlschecker.html EX. their mail server to say Gmail would be delivered via TLS and atleast for HIPAA would be compliant as far as the delivery mechanism.
Jul
31
comment How can I report PCI-DSS violations?
How would someone know if the data is encrypted or not on a specific system? I see 3 possibilities 1. They built the system or work there. 2. They work at a vendor that is tied into their system and saw a design flaw. 3. They already compromised the system. The first one seems most probable, however there is a slight possibility that that they overheard in conversation or know someone who works there. All I can say is that if I knew the store, I would not shop there anymore because of this.
Jul
30
answered Lightweight Live Pen-test OS
Jul
30
answered How can I report PCI-DSS violations?
Jul
30
comment Is it possible to MITM between Google voice SMS/TXT Messaging
I also have google voice as well. The issue cannot be avoided other than masking my real number. How can I report spammers of Google Voice?
Jul
26
comment Is it possible to MITM between Google voice SMS/TXT Messaging
It seems that I only get spammed for certain listings of stuff that they want to be picked up by their currier. I prefer TXT messages since I then have record of our conversations. Is there a way to block all google voice text messages through your carrier?
Jul
26
comment Is it possible to MITM between Google voice SMS/TXT Messaging
I have not been able to find any way to report this directly to google. If I provided like a SMS conference line I wouldn't see how that could arise legal issues especially when there isn't a way to report them to Google.
Jul
26
asked Is it possible to MITM between Google voice SMS/TXT Messaging
Jul
19
awarded  Scholar
Jul
19
comment How to catch a SMS spammer who is using google voice to spam me
Where do I report SMS spamming on Google?
Jul
19
accepted How to catch a SMS spammer who is using google voice to spam me
Jul
19
awarded  Student