The DMZ

« first day (632 days earlier) ← previous day next day → last day (4546 days later) »

Scott Pack

00:13

You get me 4 Nice Answers and I'll see what I can do. :)

Lucas Kauffman

@ScottPack ON IT!

Iszi

@LucasKauffman Careful not to trigger the serial voting detectors

7 hours later…

Lucas Kauffman

07:45

@ScottPack that's one security.stackexchange.com/questions/19891/…

@ScottPack that's two security.stackexchange.com/questions/19864/…

1 hour later…

Andrey Botalov

09:10

Midnight! I can't get valid answer for this one:

Q: Minimum requrements for storing last 4 digits of credit card number?

We have a merchant website that uses Autorize.net's CIM and AIM. Our users may have multiple credit cards so we'd want to give them opportunity to distinguish between credit cards that they use on site. Currently we think about storing cardholder name, 4 last digits of CC number and its expiratio...

I know that "PCI DSS requirements are applicable if a primary account number (PAN) is stored, processed, or transmitted. If PAN is not stored, processed or transmitted, PCI DSS requirements do not apply" (p.7 of pcisecuritystandards.org/documents/pci_dss_v2.pdf)

@kaushal cites from somewhere that "Absence of FULL pan dissolves any PCI-DSS applicability. I agree with the answer above.". I don't know from where he cites that

But what about storing last 4 digits of CC number. Do I apply to PCI DSS if I store last 4 digits

vignesh

09:45

hello

3 hours later…

Jeff Ferland

12:17

Ah, back in Boston. I had Dunkin' Donuts for breakfast. Life is a little better. :)

Polynomial

afternoon all :]

sat on the train back from 44con ^_^

Lucas Kauffman

@Polynomial how was it?

Terry Chia

@Polynomial good night!

Polynomial

It rocked

won a BusPirate too :D

Terry Chia

BusPirate?

Polynomial

12:26

bought some lockpicks, t-shirt, mug, got some other free schwag

ridiculous amounts of free beer

@TerryChia It's a USB logic analyser

Terry Chia

Ah I see.

Polynomial

for hardware reverse engineering / debugging

got 4 job offers too :P

as you do

Terry Chia

@Polynomial nice

gonna jump ship?

Polynomial

dunno yet. might have to move closer to London

but there certainly are some interesting opportunities

one from HP Labs, actually.

and MWR Labs

but there's a potential for me to work from home if I can commute to meetings 1/2 times a month.

average salary is about 50% to 100% more than I earn right now.

so it's something I'm most definitely interested in.

Terry Chia

Sounds excellent actually.

Polynomial

12:33

indeed.

Rory Alsop

nice

Polynomial

got a load of notes from the talks too, so I'll be doing some blog stuff based on it.

Rory Alsop

excellent

Terry Chia

@Polynomial Looking forward to it.

Polynomial

sadly, I didn't get to talk to Rory McCune much

Rory Alsop

12:34

include swag pics, obviously, just to make me jealous

Polynomial

we kept missing each other

haha

yeah, I got my Sec.SE t-shirt and stickers! :D

and pens

Rory Alsop

cool

Polynomial

but yeah, I'll have to include schwag photos :D

w00t, it's my favourite time of the day!

Rory Alsop

ISACA coming up with some good extras for security folks over the next couple of years. good conference so far

Polynomial

13:37

Rory Alsop

12:38

haha

Polynomial

already booked time off for BSidesLondon

it's April 12th I believe.

already booked time off for BSidesLondon

Rory Alsop

right- will need to get that in the diary

Polynomial

already booked time off for BSidesLondon

it's April 12th I believe.

Terry Chia

@Polynomial something wrong?

you said that like three times already.

Polynomial

@TerryChia ?

@TerryChia Sorry, train wifi keeps timing out

Terry Chia

12:41

heh. bad internet. luckily i don't experience that much in my country.

Polynomial

@RoryAlsop better than getting it in the dairy!

@TerryChia Well train wifi is basically just 3G with a wifi AP attached.

so it's pretty crappy in tunnels and stuff.

Terry Chia

I see.

Scott Pack

@JeffFerland I'm a fan of Tim's, but whatever. Welcome back to the right coast.

Gilles

13:19

Q: Physically break into box? (Memory & disk)

I have a VPS. I might be able to encrypt my partition but I havent tried. My VPS company I believe can reset my root password although the only SSH key I see is my own. With all my data I have it encrypted with encfs. Just in case a hacker gets some kind of access, encfs can only mount the drive ...