Re: pci plugins....
kalin m <[email protected]> Mon, 16 Mar 2009 14:52:16 -0400
| Newsgroups | gmane.comp.security.nessus.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============0189762593== Content-Type: multipart/alternative; boundary="------------090604030506010706030807" This is a multi-part message in MIME format. --------------090604030506010706030807 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit thanks Alex... i'm aware of the self-assessment questionnaire. i had to deal with it a few times. i just ratter not deal with it too much anymore. it's mostly a bureaucratic process to which i developed a strong allergy. anything that can ease the symptoms is more attractive. i just don't like when another useful open source tool goes proprietary and everybody - big fat corporations and single users alike - are thrown in the same $1200 dollar/year bucket. anyway... there is nothing i can about this now. Alex wrote: > I was referring to "Home feed" information if you need Nessus for > non-commercial use - just to hone your skills. If you need PCI > compliance, there are other ways to achieve and determine if you are > compliant. I believe self-assessment questionere should be sufficient > for small volume vendors. You can find all the information at: > > https://www.pcisecuritystandards.org/ > > Alex > > > > kalin m wrote: >> >> i can't pay $1200 a year to check if 3 machines are pci comliant >> every 6 months or so. just don't have it. >> >> >> Alex wrote: >>> You didn't use it that much, did you? :) >>> >>> It is all there on the web site: >>> >>> http://www.nessus.org/plugins/index.php?view=register-info >>> >>> Alex >>> >>> >>> >>> kalin m wrote: >>>> >>>> hi all... i used to use nessus at my old job (currently >>>> unemployed)... it was pretty cool. >>>> >>>> now i had to get some license (?!?) >>>> >>>> the thing is the email came with the 'license' and the following >>>> explanation on how to use it: >>>> To activate your account, open the program 'Nessus Server Manager' >>>> located under /Applications/Nessus/ and enter your activation >>>> code in the program. >>>> >>>> after a while of trying to figure out how/where to "enter" the code >>>> "in the program" - there is no prompt or anything, and no menu >>>> option - i just found the bin under Library and did the command >>>> line activation. passed that it took a while to get the new >>>> plugins. but still the plugins from the demo video are not there. >>>> there are some PCI audit pluggins i'd like to use. excuse me, >>>> test... it's not 'over a network'... cause you know, now that is, >>>> and i quote, "strictly prohibited". like it's a felony or something >>>> to try to figure out if your own machine is pci complient... >>>> >>>> does anybody know where can i get those? i'd appreciate very much. >>>> >>>> thanks.... >>>> ------------------------------------------------------------------------ >>>> >>>> _______________________________________________ >>>> Nessus mailing list >>>> [email protected] >>>> http://mail.nessus.org/mailman/listinfo/nessus >>>> ------------------------------------------------------------------------ >>>> >>>> >>>> No virus found in this incoming message. >>>> Checked by AVG - www.avg.com >>>> Version: 8.0.237 / Virus Database: 270.11.15/2004 - Release Date: 03/16/09 07:04:00 >>>> >>>> >>> ------------------------------------------------------------------------ >>> >>> _______________________________________________ >>> Nessus mailing list >>> [email protected] >>> http://mail.nessus.org/mailman/listinfo/nessus >> ------------------------------------------------------------------------ >> >> >> No virus found in this incoming message. >> Checked by AVG - www.avg.com >> Version: 8.0.237 / Virus Database: 270.11.15/2004 - Release Date: 03/16/09 07:04:00 >> >> > ------------------------------------------------------------------------ > > _______________________________________________ > Nessus mailing list > [email protected] > http://mail.nessus.org/mailman/listinfo/nessus --------------090604030506010706030807 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> <br> thanks Alex... i'm aware of the self-assessment questionnaire. i had to deal with it a few times. i just ratter not deal with it too much anymore. it's mostly a bureaucratic process to which i developed a strong allergy. anything that can ease the symptoms is more attractive. <br> i just don't like when another useful open source tool goes proprietary and everybody - big fat corporations and single users alike - are thrown in the same $1200 dollar/year bucket.<br> <br> anyway... there is nothing i can about this now. <br> <br> <br> <br> Alex wrote: <blockquote cite="mid:[email protected]" type="cite"> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <div><font face="Arial" size="2">I was referring to "Home feed" information if you need Nessus for non-commercial use - just to hone your skills. If you need PCI compliance, there are other ways to achieve and determine if you are compliant. I believe self-assessment questionere should be sufficient for small volume vendors. You can find all the information at:<br> <br> </font><a moz-do-not-send="true" href="https://www.pcisecuritystandards.org/">https://www.pcisecuritystandards.org/</a><br> <br> Alex<br> </div> <div> </div> <br> <br> kalin m wrote: <blockquote cite="mid:[email protected]" type="cite"> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> <br> i can't pay $1200 a year to check if 3 machines are pci comliant every 6 months or so. just don't have it. <br> <br> <br> Alex wrote: <blockquote cite="mid:[email protected]" type="cite"> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> You didn't use it that much, did you? :) <br> <br> It is all there on the web site:<br> <br> <a moz-do-not-send="true" href="http://www.nessus.org/plugins/index.php?view=register-info">http://www.nessus.org/plugins/index.php?view=register-info</a><br> <br> Alex<br> <br> <br> <br> kalin m wrote: <blockquote cite="mid:[email protected]" type="cite"><br> hi all... i used to use nessus at my old job (currently unemployed)... it was pretty cool.<br> <br> now i had to get some license (?!?)<br> <br> the thing is the email came with the 'license' and the following explanation on how to use it:<br> <pre wrap="">To activate your account, open the program 'Nessus Server Manager' located under <i class="moz-txt-slash"><span class="moz-txt-tag">/</span>Applications/Nessus<span class="moz-txt-tag">/</span></i> and enter your activation code in the program. </pre> after a while of trying to figure out how/where to "enter" the code "in the program" - there is no prompt or anything, and no menu option - i just found the bin under Library and did the command line activation. passed that it took a while to get the new plugins. but still the plugins from the demo video are not there. <br> there are some PCI audit pluggins i'd like to use. excuse me, test... it's not 'over a network'... cause you know, now that is, and i quote, "strictly prohibited". like it's a felony or something to try to figure out if your own machine is pci complient...<br> <br> does anybody know where can i get those? i'd appreciate very much. <br> <br> thanks....<br> <pre wrap=""><hr size="4" width="90%"> _______________________________________________ Nessus mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://mail.nessus.org/mailman/listinfo/nessus">http://mail.nessus.org/mailman/listinfo/nessus</a></pre> <pre wrap=""><hr size="4" width="90%"> No virus found in this incoming message. Checked by AVG - <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.avg.com">www.avg.com</a> Version: 8.0.237 / Virus Database: 270.11.15/2004 - Release Date: 03/16/09 07:04:00 </pre> </blockquote> <pre wrap=""><hr size="4" width="90%"> _______________________________________________ Nessus mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://mail.nessus.org/mailman/listinfo/nessus">http://mail.nessus.org/mailman/listinfo/nessus</a></pre> </blockquote> <pre wrap=""><hr size="4" width="90%"> No virus found in this incoming message. Checked by AVG - <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.avg.com">www.avg.com</a> Version: 8.0.237 / Virus Database: 270.11.15/2004 - Release Date: 03/16/09 07:04:00 </pre> </blockquote> <pre wrap=""> <hr size="4" width="90%"> _______________________________________________ Nessus mailing list <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a class="moz-txt-link-freetext" href="http://mail.nessus.org/mailman/listinfo/nessus">http://mail.nessus.org/mailman/listinfo/nessus</a></pre> </blockquote> </body> </html> --------------090604030506010706030807-- --===============0189762593== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus --===============0189762593==--