235 reputation
17
bio website gotworms.co.uk
location Cardiff, South Wales
age 33
visits member for 4 years, 10 months
seen Oct 30 at 15:47

I'm a bit of a jack of all trades but I mainly stick to Networks and Operations and integration between the two...

I hate GUIs, HTML (or variants thereof) or anything that means I have to move my mouse.

I script in Python, code in C, C++ and extremely opinionated about lots of things and not much at all.

I detest PHP.


Aug
20
awarded  Yearling
Jul
12
comment Cisco ASA: Terrible network speed once or twice a day, fine otherwise
Are the servers connected to the ASA5505 directly or via some intermediary switch?
Jul
12
answered Cisco ASA: Terrible network speed once or twice a day, fine otherwise
Jul
12
answered uwsgi emperor mode - Warning message
Jul
11
awarded  Commentator
Jul
11
comment Can only access servers from one side of the VPN
Nope it's not. The other question is about 2 servers on the SAME subnet, whereas these servers are physically disparate subnets. Interconnected via VPN.
Jul
11
revised Can only access servers from one side of the VPN
added some links to ScreenOS
Jul
11
answered Can only access servers from one side of the VPN
Apr
19
answered Disabling weak ciphers on Windows 2003
Feb
8
comment PCI-DSS Compliance
I believe you should clarify the 'PCI compliance "out-of-the-box"' comment. While the device does go a long way to helping with PCI-Compliance, it does not provide compliance out of the box. What would happen if the switch which connects the servers storing card-data were to be compromised and port-mirroring configured to mirror data to somewhere else? It would be a trivial exercise to recover card details, even behind the "application firewall". I would not recommend devices like this as a 'magic bullet' without explicit clarification.
Feb
8
revised PCI-DSS Compliance
specificity
Feb
8
comment PCI-DSS Compliance
To expand on Mat's comment, only applications which are to be re-sold as a product must comply with PA-DSS. Applications which are developed bespoke for a purpose (one-off's) are required to comply only with the DSS. By application, I mean something like an EPOS terminal software or some gadget to connect with a PED device or Chip and Pin reader.
Feb
8
answered PCI-DSS Compliance
Jan
17
awarded  Teacher
Jan
16
answered Does the use of a POS terminal mean I need PCI DSS compliance?
Jan
16
comment Does the use of a POS terminal mean I need PCI DSS compliance?
Jake, your answer is completely incorrect. PCI DSS mandates that any merchant who takes payments through the participating card schemes must be PCI DSS compliant. This is even the case if you don't handle the payments yourself and pass the request off to a gateway. It is the merchants responsibility to ensure that all links in the chain are PCI DSS compliant, NOT the payment providers and it doesn't even matter if you don't store the cards. Simply by having a merchant number you are liable.
Oct
25
awarded  Editor
Oct
25
comment Mitigating the 'firesheep' attack at the network layer?
Yes. Assuming you're on an unsecured network. I'm thinking from the perspective of protecting my users.
Oct
25
revised Mitigating the 'firesheep' attack at the network layer?
added 322 characters in body
Oct
25
comment Mitigating the 'firesheep' attack at the network layer?
The problem is the cookies. The fact they're unencrypted means that someone can sidejack someone's session. Where they're stored is irrelevant. Once they're sent in the clear, they're vulnerable to being sniffed. The reason it's a problem now, is that anyone who can install a firefox extension (pretty much everyone) can now do the sniffing.