Gun store Shooting Locations It is currently Tue Oct 22, 2019 3:48 am


Rules Brads Guns Rainier Arms McCallen Killer Innovations Fessleman Firearms
WGO Chat Room Rehv Arms Vantage Reloading
Gear Fortis WCA 2A Ind. Pintos WAC
Calendar




Reply to topic  [ 10 posts ] 
 Compliance and Network Security 
Author Message
Site Supporter
User avatar
Site Supporter

Location: Bothell
Joined: Tue Nov 17, 2015
Posts: 375
Noticed a post in the FFL area about a vendor working on PCI compliance for taking credit cards. I wanted to offer free consultation to any small FFL if they run in to issues or have concerns regarding PCI compliance or security. I've been in this field for 10 years, and I'd love to help anyone that needs it.


Wed Apr 27, 2016 6:37 pm
Profile
Site Supporter
User avatar
Site Supporter

Location: Mukilteoish
Joined: Sat Mar 26, 2011
Posts: 8688
Generous offer.
PCI compliance is a whole new can of worms for a lot of people.
I've had prospective clients bitching about why they couldn't download malware screensavers, store credit card numbers in plain text, and couldn't keep the same password they used for the past 8 years.

_________________
NRA Life Member


Wed Apr 27, 2016 6:49 pm
Profile
Site Supporter
User avatar
Site Supporter

Location: Bothell
Joined: Tue Nov 17, 2015
Posts: 375
Guntrader wrote:
Generous offer.
PCI compliance is a whole new can of worms for a lot of people.
I've had prospective clients bitching about why they couldn't download malware screensavers, store credit card numbers in plain text, and couldn't keep the same password they used for the past 8 years.


My first day at a really well known company, IT told us "just use a pets name and add the number one on the end, then when you have to update, you just make it two"


Wed Apr 27, 2016 7:03 pm
Profile
Site Supporter
User avatar
Site Supporter

Location: Mukilteoish
Joined: Sat Mar 26, 2011
Posts: 8688
I have seen the 'increment by one' scheme, may have even been in literature from PCI.

My ex was a pension analyst for the Teamsters Trust.
They had to change passwords every two weeks, couldn't contain more than 7 characters from the last password, upper, lower, number, extended characters, etc.
So they just taped them to their monitors or desk.

Weakest link in infosec is always people.

_________________
NRA Life Member


Wed Apr 27, 2016 7:11 pm
Profile
Site Supporter
User avatar
Site Supporter

Location: Bothell
Joined: Tue Nov 17, 2015
Posts: 375
Guntrader wrote:
I have seen the 'increment by one' scheme, may have even been in literature from PCI.

My ex was a pension analyst for the Teamsters Trust.
They had to change passwords every two weeks, couldn't contain more than 7 characters from the last password, upper, lower, number, extended characters, etc.
So they just taped them to their monitors or desk.

Weakest link in infosec is always people.


For sure, sometimes people forget the balance between productivity and security. Too Secure = No business


Wed Apr 27, 2016 7:12 pm
Profile
Site Supporter / FFL Dealer
User avatar
Site Supporter / FFL Dealer

Location: Algona, WA
Joined: Thu Aug 8, 2013
Posts: 904
Real Name: Mark
Very generous of you- for my business, I am going to run the SAQ again and see if I am compliant. Last time I was only one or two questions shy of the green light.

PCI compliance is far beyond password security in complexity, scope, and depth.

It has been an experience...

_________________
"To compel a man to furnish funds for the propagation of ideas he disbelieves and abhors is sinful and tyrannical." - Thomas Jefferson




Wed Apr 27, 2016 7:38 pm
Profile WWW
Site Supporter
User avatar
Site Supporter

Location: Everett, WA
Joined: Tue Feb 21, 2012
Posts: 1103
Real Name: Chris
It sucks having to make any services I offer ITAR compliant.


Wed Apr 27, 2016 10:07 pm
Profile ICQ
Site Supporter
User avatar
Site Supporter

Location: Lake Stevens
Joined: Fri Jan 3, 2014
Posts: 2586
Real Name: Paris
Are you looking or interested in working with other companies on this compliance?
I know its a pain and some of my clients have been messing with it off and on. When it comes up again you have any desire to assist (for pay of course).

_________________
Paris
You can never be too prepared. Consider the ant thou sluggard.
Proverbs 27:12 -- “A prudent person foresees the danger ahead and takes precautions. The simpleton goes blindly on and suffers the consequences.”
Need Supplies, I have extras, Grab the Supplies_Available.pdf. Prices Quoted are at my cost to everyone here: https://backupcomputing.dattodrive.com/index.php/s/KuFBobyElJbltAj

The prudent Wagunner trains and prepares to defend themselves and their families, friends, and neighbors. They also are prepared to feed, shelter, and provide aid as well.
Danger is coming and may already be here, how prepared are you? Click the link above for lots of good info to get started.


Sat May 25, 2019 11:49 am
Profile WWW
Site Admin
User avatar
Site Admin

Location: Olympia, WA
Joined: Fri Mar 11, 2011
Posts: 34010
Real Name: Dan
Col_Temp wrote:
Are you looking or interested in working with other companies on this compliance?
I know its a pain and some of my clients have been messing with it off and on. When it comes up again you have any desire to assist (for pay of course).


Paris... This was a 3 year old thread man... :bonghit:


Sat May 25, 2019 12:35 pm
Profile WWW
Site Supporter
User avatar
Site Supporter

Location: Lake Stevens
Joined: Fri Jan 3, 2014
Posts: 2586
Real Name: Paris
Massivedesign wrote:
Col_Temp wrote:
Are you looking or interested in working with other companies on this compliance?
I know its a pain and some of my clients have been messing with it off and on. When it comes up again you have any desire to assist (for pay of course).


Paris... This was a 3 year old thread man... :bonghit:

:bigsmile: Yeah but I'm pretty sure he is still around....
I'll message him and see.

_________________
Paris
You can never be too prepared. Consider the ant thou sluggard.
Proverbs 27:12 -- “A prudent person foresees the danger ahead and takes precautions. The simpleton goes blindly on and suffers the consequences.”
Need Supplies, I have extras, Grab the Supplies_Available.pdf. Prices Quoted are at my cost to everyone here: https://backupcomputing.dattodrive.com/index.php/s/KuFBobyElJbltAj

The prudent Wagunner trains and prepares to defend themselves and their families, friends, and neighbors. They also are prepared to feed, shelter, and provide aid as well.
Danger is coming and may already be here, how prepared are you? Click the link above for lots of good info to get started.


Fri Jun 07, 2019 1:45 pm
Profile WWW
Display posts from previous:  Sort by  
Reply to topic   [ 10 posts ] 

Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum



Rent Me Pintos NRA SAF CCKRBA
Aldersons e-arms.com


Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software for PTF.
[ Time : 0.690s | 16 Queries | GZIP : On ]