network profile
| bio | website | per.wiklander.biz |
|---|---|---|
| location | Stockholm, Sweden | |
| age | 31 | |
| visits | member for | 2 years, 6 months |
| seen | May 19 '12 at 11:46 | |
| stats | profile views | 14 |
Working as freelance developer. Currently doing WordPress sites for clients. Slowly building a company with two friends.
|
Nov 12 |
awarded | Yearling |
|
May 10 |
awarded | Nice Answer |
|
Nov 16 |
comment |
How to securely hash passwords? @AviD: Yeah perhaps it does not do so much good, with Moore's law and all, but It will at least kill your rainbow tables. The whole point with those is that they are pre generated, right? There are no rainbow tables with my salt and my choice of number of crypto runs. |
|
Nov 16 |
comment |
When a sysadmin leaves what extra precautions need to be taken? @seedy: it is a policy. As such it has to be followed. Just like a law. It is against the law to kill people, but is still possible (and pretty easy). |
|
Nov 13 |
comment |
How to securely hash passwords? +1 for using a slow password function. Like rerunning the crypt 10000 times with the previous result as salt. This requires the brute force attacker to run his code 10000 times extra per password as well. |
|
Nov 13 |
comment |
When a sysadmin leaves what extra precautions need to be taken? Is this question about a best practice to avoid this problem under normal circumstances or are you asking what to do now that you have fired an admin who had access to everything and you suspect that he is pissed off and will attack your company? |
|
Nov 13 |
awarded | Editor |
|
Nov 13 |
revised |
When a sysadmin leaves what extra precautions need to be taken? Added clarification about this only working if admins actually follow the policy before turning evil. |
|
Nov 12 |
awarded | Teacher |
|
Nov 12 |
answered | When a sysadmin leaves what extra precautions need to be taken? |
|
Nov 12 |
comment |
What is the right way of storing database connection strings from the security point of view? Most answers here assume the presence of Windows, SQL Server and ASP.NET. Since (at least) the OP doesn't mention any particular deployment environment it would be good with some answers regarding things like Linux+Apache+MySQL+PHP as well. |
|
Nov 12 |
comment |
What is the right way of storing database connection strings from the security point of view? "things you should never do": haha, sounds like about every open source PHP project I've ever seen. But on a more serious note, what would you do if it is an interpreted language that has to have access to the credentials to be able to connect to the DB? |
|
Nov 12 |
awarded | Supporter |
|
Nov 12 |
awarded | Autobiographer |
