805 reputation
725
bio website johngraybosch.com
location Hauppauge, NY
age
visits member for 3 years, 1 month
seen Jul 28 at 21:53

I'm an Application Developer in Long Island, NY.


Jun
17
accepted Allow read-only access to server-side pages for security review?
Jun
17
comment Allow read-only access to server-side pages for security review?
Ahh, true. I guess the same is true when you have a server farm behind a web-facing proxy. The client can't tell the difference.
Jun
17
asked Allow read-only access to server-side pages for security review?
Jun
17
accepted Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
12
awarded  Yearling
Jun
11
comment Is it possible to create a secure chat web application relying on HTML5 web sockets?
Is the security of the CA system any less reliable than ensuring that no one has tampered with a secure chat executable?
Jun
11
asked Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
7
comment RSA vs PBKDF2 for password storage (theoretical)
Thanks for the detailed answer. I never realized that RSA produces a randomized cipher text, but now it makes sense why it would need to.
Jun
7
accepted RSA vs PBKDF2 for password storage (theoretical)
Jun
6
revised RSA vs PBKDF2 for password storage (theoretical)
edited tags
Jun
6
asked RSA vs PBKDF2 for password storage (theoretical)
May
17
comment Protecting Password Hashes with Store Procedures?
That's what I thought you meant. Any examples / products that do this?
May
17
comment Password Verification Server
@tylerl Do companies ever implement a separate password validation server on a general purpose computer? I'm curious if this approach is used at all since it does seem to add a nice layer of protection.
May
15
accepted Password Verification Server
May
15
comment Protecting Password Hashes with Store Procedures?
what do you mean by "dedicated password verification server"?
May
15
comment Password Verification Server
Ok, is there anything similar to this that's software-based?
May
15
asked Password Verification Server
May
10
accepted Protecting Password Hashes with Store Procedures?
May
10
comment Protecting Password Hashes with Store Procedures?
Can you point out any tutorials for setting up a dedicated password server for asp.net?
May
10
comment Protecting Password Hashes with Store Procedures?
@SébastienRenauld it would seem that this answer security.stackexchange.com/a/6065/25821 describes exactly the scenario I mentioned...