703 reputation
418
bio website johngraybosch.com
location
age
visits member for 2 years, 2 months
seen yesterday

I'm an Application Developer in Long Island, NY.


Jun
19
comment Allowing user to access password protected website without disclosing the password
@schroeder you're right. But trust is a human problem. You can't solve everything with technology. That's why they have non-disclosure agreements, and the like.
Jun
19
awarded  Teacher
Jun
19
comment Allowing user to access password protected website without disclosing the password
The employee and your friend should each have their own accounts, rather than using client's accounts...
Jun
19
answered Allowing user to access password protected website without disclosing the password
Jun
17
accepted Allow read-only access to server-side pages for security review?
Jun
17
comment Allow read-only access to server-side pages for security review?
Ahh, true. I guess the same is true when you have a server farm behind a web-facing proxy. The client can't tell the difference.
Jun
17
asked Allow read-only access to server-side pages for security review?
Jun
17
accepted Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
12
awarded  Yearling
Jun
11
comment Is it possible to create a secure chat web application relying on HTML5 web sockets?
Is the security of the CA system any less reliable than ensuring that no one has tampered with a secure chat executable?
Jun
11
asked Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
7
comment RSA vs PBKDF2 for password storage (theoretical)
Thanks for the detailed answer. I never realized that RSA produces a randomized cipher text, but now it makes sense why it would need to.
Jun
7
accepted RSA vs PBKDF2 for password storage (theoretical)
Jun
6
revised RSA vs PBKDF2 for password storage (theoretical)
edited tags
Jun
6
asked RSA vs PBKDF2 for password storage (theoretical)
May
17
comment Protecting Password Hashes with Store Procedures?
That's what I thought you meant. Any examples / products that do this?
May
17
comment Password Verification Server
@tylerl Do companies ever implement a separate password validation server on a general purpose computer? I'm curious if this approach is used at all since it does seem to add a nice layer of protection.
May
15
accepted Password Verification Server
May
15
comment Protecting Password Hashes with Store Procedures?
what do you mean by "dedicated password verification server"?
May
15
comment Password Verification Server
Ok, is there anything similar to this that's software-based?