692 reputation
418
bio website johngraybosch.com
location
age
visits member for 2 years, 1 month
seen 2 hours ago

I'm an Application Developer in Long Island, NY.


Jun
12
awarded  Yearling
Jun
11
comment Is it possible to create a secure chat web application relying on HTML5 web sockets?
Is the security of the CA system any less reliable than ensuring that no one has tampered with a secure chat executable?
Jun
11
asked Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
7
comment RSA vs PBKDF2 for password storage (theoretical)
Thanks for the detailed answer. I never realized that RSA produces a randomized cipher text, but now it makes sense why it would need to.
Jun
7
accepted RSA vs PBKDF2 for password storage (theoretical)
Jun
6
revised RSA vs PBKDF2 for password storage (theoretical)
edited tags
Jun
6
asked RSA vs PBKDF2 for password storage (theoretical)
May
17
comment Protecting Password Hashes with Store Procedures?
That's what I thought you meant. Any examples / products that do this?
May
17
comment Password Verification Server
@tylerl Do companies ever implement a separate password validation server on a general purpose computer? I'm curious if this approach is used at all since it does seem to add a nice layer of protection.
May
15
accepted Password Verification Server
May
15
comment Protecting Password Hashes with Store Procedures?
what do you mean by "dedicated password verification server"?
May
15
comment Password Verification Server
Ok, is there anything similar to this that's software-based?
May
15
asked Password Verification Server
May
10
accepted Protecting Password Hashes with Store Procedures?
May
10
comment Protecting Password Hashes with Store Procedures?
Can you point out any tutorials for setting up a dedicated password server for asp.net?
May
10
comment Protecting Password Hashes with Store Procedures?
@SébastienRenauld it would seem that this answer security.stackexchange.com/a/6065/25821 describes exactly the scenario I mentioned...
May
10
comment Protecting Password Hashes with Store Procedures?
@SébastienRenauld really? Cause that would kind of blow my idea out of the water... There's gotta be another way to lock it down, no?
May
10
asked Protecting Password Hashes with Store Procedures?
May
10
comment Does escaping quotes protect me from SQL injection?
You definitely want to parametrize all of your SQL. If you can do this in all of your SQL by default in your data access layer code (i.e. in a framework) that's the best. There's no reason, ever, not to write parametrized queries.
May
8
comment Why banking websites always ask me to authenticate my PC even after I'd chosen to “Remember my Computer”?
The web browser you're logging into your bank account with does not have access to most of stats you mentioned, especially your MAC address. That being said, they can log quite a bit including the browser, OS, and IP address you're coming from. More than likely they use cookies in addition to these, though.