788 reputation
625
bio website johngraybosch.com
location Hauppauge, NY
age
visits member for 2 years, 11 months
seen Mar 27 at 20:18

I'm an Application Developer in Long Island, NY.


Jun
17
accepted Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
12
awarded  Yearling
Jun
11
comment Is it possible to create a secure chat web application relying on HTML5 web sockets?
Is the security of the CA system any less reliable than ensuring that no one has tampered with a secure chat executable?
Jun
11
asked Is it possible to create a secure chat web application relying on HTML5 web sockets?
Jun
7
comment RSA vs PBKDF2 for password storage (theoretical)
Thanks for the detailed answer. I never realized that RSA produces a randomized cipher text, but now it makes sense why it would need to.
Jun
7
accepted RSA vs PBKDF2 for password storage (theoretical)
Jun
6
revised RSA vs PBKDF2 for password storage (theoretical)
edited tags
Jun
6
asked RSA vs PBKDF2 for password storage (theoretical)
May
17
comment Protecting Password Hashes with Store Procedures?
That's what I thought you meant. Any examples / products that do this?
May
17
comment Password Verification Server
@tylerl Do companies ever implement a separate password validation server on a general purpose computer? I'm curious if this approach is used at all since it does seem to add a nice layer of protection.
May
15
accepted Password Verification Server
May
15
comment Protecting Password Hashes with Store Procedures?
what do you mean by "dedicated password verification server"?
May
15
comment Password Verification Server
Ok, is there anything similar to this that's software-based?
May
15
asked Password Verification Server
May
10
accepted Protecting Password Hashes with Store Procedures?
May
10
comment Protecting Password Hashes with Store Procedures?
Can you point out any tutorials for setting up a dedicated password server for asp.net?
May
10
comment Protecting Password Hashes with Store Procedures?
@SébastienRenauld it would seem that this answer security.stackexchange.com/a/6065/25821 describes exactly the scenario I mentioned...
May
10
comment Protecting Password Hashes with Store Procedures?
@SébastienRenauld really? Cause that would kind of blow my idea out of the water... There's gotta be another way to lock it down, no?
May
10
asked Protecting Password Hashes with Store Procedures?
May
10
comment Does escaping quotes protect me from SQL injection?
You definitely want to parametrize all of your SQL. If you can do this in all of your SQL by default in your data access layer code (i.e. in a framework) that's the best. There's no reason, ever, not to write parametrized queries.