255 reputation
27
bio website lebenplusplus.de
location Hanover, Germany
age
visits member for 2 years, 4 months
seen Dec 17 at 10:20

Jun
19
comment User data encryption/decryption in a database (PHP)
If the SQL injection leads to full access of the whole server then you're right. If the SQL injection just exposes the encrypted contents of the fields and the key is stored somewhere else on the server (your application code, some file or in shared memory), the data is still secure.
Jun
19
comment Is it generally a bad idea to encrypt database fields?
If the web app is compromised, what's stopping the attacker from sending crypttext to the crypto service and getting plain text back? No need for a key there.
Jun
18
awarded  Yearling
Jun
18
comment How to anonymize contributors while still keeping attribution?
I was always imagining "If someone can steal the database", he will most likely be able to steal any file on the computer. So I'm quite reluctant to just encrypt the info and keep the decryption key on the same machine. Any tips on how to keep them on the same machine in a secure fashion?
Jun
18
answered Does logging out also stops the hijacked session?
Jun
18
asked How to anonymize contributors while still keeping attribution?
Apr
18
awarded  Nice Question
Aug
20
awarded  Notable Question
Feb
20
awarded  Popular Question
Jan
30
comment Which hard disk encryptions schemes are tied to the original hardware?
I don't know and I don't want to. I thought there might some schemes that do it, especially when they use the TPM. That's why I asked this question - just to be sure I can access my data when the rest of the computer is gone.
Jan
29
revised Which hard disk encryptions schemes are tied to the original hardware?
better formatting of original question
Jan
29
comment Which hard disk encryptions schemes are tied to the original hardware?
And this software is not tying the encryption to some hardware id, right? The passphrase protects the encryption key which is stored somewhere on the hard drive?
Jan
29
revised Which hard disk encryptions schemes are tied to the original hardware?
corrected typos
Jan
29
suggested approved edit on Which hard disk encryptions schemes are tied to the original hardware?
Jan
29
asked Which hard disk encryptions schemes are tied to the original hardware?
Jan
4
revised How to Securely Implement a “Remember Me” Feature?
explanation of article content
Jan
4
comment How to Securely Implement a “Remember Me” Feature?
Thanks. I've expanded my answer and retracted my question. Comments are welcome.
Jan
4
revised How to Securely Implement a “Remember Me” Feature?
explanation of article content
Jan
4
answered How to Securely Implement a “Remember Me” Feature?
Aug
26
awarded  Teacher