2,083 reputation
21649
bio website
location B.C., Canada
age 23
visits member for 2 years, 1 month
seen 13 hours ago

May
13
asked Virus with PGP Encryption Preventing Virus Scan
May
11
accepted From a security standpoint should users be asked to confirm their password when registering?
May
8
comment What precaustions should be taken when the file displayed by a webpage is specified by the GET value
I'm open to any ideas so let's talk about the database. Are you saying to make a database so that when the value for GET is abc (i.e. navigate.php?d=abc) the database would map abc to firstpage.html? Or would it make more sense to have stored in the database a list of viewable pages and if the GET value (i.e. firstpage.html) isn't on the list the page is not displayed?
May
8
asked What precaustions should be taken when the file displayed by a webpage is specified by the GET value
May
6
accepted How often should passwords change?
May
6
accepted How do browsers know which cookie to get?
May
6
accepted How can JavaScript be tampered with while viewing a web page?
May
6
accepted Avoiding Brute Force Attacks in a Web Based Login Form
May
2
awarded  Notable Question
May
1
accepted When checking a session variable to see if a user is logged in, is it enough to check to see if the variable is set?
Apr
30
reviewed Approve suggested edit on Avoiding Brute Force Attacks in a Web Based Login Form
Apr
29
comment Avoiding Brute Force Attacks in a Web Based Login Form
Your #2 sounds very similar to what my initial idea was. Is the difference that each script that is sleeping uses server resources but blocking an IP address doesn't really use resources?
Apr
29
comment Avoiding Brute Force Attacks in a Web Based Login Form
I kind of don't get your reasoning. Why not have login for a particular username take longer and longer regardless of the requester's IP address?
Apr
29
asked Avoiding Brute Force Attacks in a Web Based Login Form
Apr
28
asked How often should passwords change?
Apr
23
asked How can JavaScript be tampered with while viewing a web page?
Apr
23
accepted How to protect against an attack where a person claims to be in a position of authority?
Apr
23
accepted What's a good secure file deleter
Apr
23
comment What's a good secure file deleter
Here's more info on number of rounds being irrelevant en.wikipedia.org/wiki/Data_erasure#Number_of_overwrites_needed
Apr
23
accepted What should be backedup periodically?