1995: Back before PCI compliance existed, shortly after SSL was first developed, vendors wanted to have the ability to have an e-commerce store but not take the risk of having credit card information sent via email or stored unencrypted.

Worked with one of the largest florists in the United States to develop a system that allowed web orders to be sent to via fax. Setup a contract that charged a percentage of each order instead of a monthly fee.  Within a year they were making more orders per month than they usually made all year.

Client had an emergency situation regarding a custom Windows .NET application that was an online store, a CRM system, an enterprise shipping/printing management system, and an employee management system.

Was able to immediately identify key security issues and attack vectors to stop ongoing attacks.

Assisted legal teams/law enforcement with chain of evidence and reports. Worked with legacy system code/server and client’s IT team to identify further weaknesses in system.

Led teams in multi-year process to modularize and replace legacy infrastructure without impacting business continuity. Upgrades included:

Client had legacy Windows NT application (not connected to Internet, but running legacy system) that was running on VMWARE ESXi.

Client wanted to migrate to KVM/qemu however the old physical system had IDE emulation via Adaptec SCSI->IDE. And client had created the VMWARE emulation the same way. Thus when the VM was converted from VMWARE to KVM/qemu the system would not eboot. Got the infamous BSOD with "INACCESSIBLE BOOT DEVICE" error as it was looking for a SCSI drive controlled as IDE by an adaptec driver that didn't exist anymore.