241 reputation
15
bio website per.wiklander.biz
location Stockholm, Sweden
age 32
visits member for 3 years, 8 months
seen Jan 2 at 23:51
Working as freelance developer. Currently doing WordPress sites for clients. Slowly building a company with two friends.

Nov
12
awarded  Yearling
May
10
awarded  Nice Answer
Nov
16
comment How to securely hash passwords?
@AviD: Yeah perhaps it does not do so much good, with Moore's law and all, but It will at least kill your rainbow tables. The whole point with those is that they are pre generated, right? There are no rainbow tables with my salt and my choice of number of crypto runs.
Nov
16
comment When a sysadmin leaves what extra precautions need to be taken?
@seedy: it is a policy. As such it has to be followed. Just like a law. It is against the law to kill people, but is still possible (and pretty easy).
Nov
13
comment How to securely hash passwords?
+1 for using a slow password function. Like rerunning the crypt 10000 times with the previous result as salt. This requires the brute force attacker to run his code 10000 times extra per password as well.
Nov
13
comment When a sysadmin leaves what extra precautions need to be taken?
Is this question about a best practice to avoid this problem under normal circumstances or are you asking what to do now that you have fired an admin who had access to everything and you suspect that he is pissed off and will attack your company?
Nov
13
awarded  Editor
Nov
13
revised When a sysadmin leaves what extra precautions need to be taken?
Added clarification about this only working if admins actually follow the policy before turning evil.
Nov
12
awarded  Teacher
Nov
12
answered When a sysadmin leaves what extra precautions need to be taken?
Nov
12
comment What is the right way of storing database connection strings from the security point of view?
Most answers here assume the presence of Windows, SQL Server and ASP.NET. Since (at least) the OP doesn't mention any particular deployment environment it would be good with some answers regarding things like Linux+Apache+MySQL+PHP as well.
Nov
12
comment What is the right way of storing database connection strings from the security point of view?
"things you should never do": haha, sounds like about every open source PHP project I've ever seen. But on a more serious note, what would you do if it is an interpreted language that has to have access to the credentials to be able to connect to the DB?
Nov
12
awarded  Supporter
Nov
12
awarded  Autobiographer