424 reputation
1413
bio website gaman.pl
location Upper Silesia, Poland
age 35
visits member for 2 years, 4 months
seen yesterday

I'm just an average person, that uniquely combines strict, engineering mind with a non-schematic, humanistic and magical way of looking on life and surrounding world.

Add a little bit of madness, and you'll get entire picture of me! :]

I'm a developer, both desktop and mobile, with 15+ years of experience and 50+ small-to-big projects on account. In the very same time I'm a writer with similar experience and a lot of books, articles, blog posts or own blogs ideas on account.


Dec
17
awarded  Citizen Patrol
Dec
17
comment Is it possible the person sitting across from me at Starbucks was trying to hack my laptop?
Sentence in your last paragraph is holy and saint. It should be engraved somewhere. It is the base of modern world.
Oct
2
awarded  Yearling
Jul
23
awarded  Popular Question
Jul
10
accepted Should application logs be available to admins or just superuser?
Jul
10
asked Should application logs be available to admins or just superuser?
Jul
2
accepted Client-side hashing of password before sending it from login form
Jul
2
asked Client-side hashing of password before sending it from login form
May
14
awarded  Famous Question
Apr
11
accepted Is it reasonable to keep control panel in separate subdomain or domain?
Apr
11
comment Is it reasonable to keep control panel in separate subdomain or domain?
So, it seems, that we have two opposite answers here. Phillip claims, that my idea is a pure security-by-obscurity, which (in my understanding of this term) should be avoided at all costs (as it gives false feeling of security, when you're actually not secured at all). While, on the other hand, your answers suggests, that my idea could possible rise security of entire system. Only a small part of it, but still. On the other hand, it seems, that hanging ports and using the same domains gives us the same result, while reducing costs (no need to register and keep two domains). Right?
Apr
10
comment Is it reasonable to keep control panel in separate subdomain or domain?
Thanks for a detailed and enlightening answer. And for that funny comment. You made my day! :] My website is soooo secure, that no one can access it!
Apr
10
asked Is it reasonable to keep control panel in separate subdomain or domain?
Jan
31
comment How much information about the reason for an unsuccessful login should a web application give?
There's also third scenario -- not display anything to user. Wordpress (both .com and standalone, installable one) uses it. Enter either wrong password or e-mail or do anything, what prevent you from login, and all you'll get is a jQuery shaking login box, waiting for you to re-enter credentials.
Nov
8
comment How reliable are device IDs provided by PhoneGap on Android and iOS?
Thanks! Do you refer to a "typical" certificate, used in similar areas? Or to "certificate" -- any form of for example file or localDB entry on a mobile device, uniquely generated by my system and (at least at the beginning) able to be read only by my mobile application? I'm asking because second option should be fairly easily to handle by a PhoneGap Build application (one code, build once in the cloud for all platforms), while first one would probably require to have separate code set for each platform, and build it locally, as each platform has probably own certificate handling routines.
Nov
8
accepted How reliable are device IDs provided by PhoneGap on Android and iOS?
Nov
8
awarded  Commentator
Nov
8
comment Can password-protected zip files be broken without brute force?
I totally agree with you, of course. I just wanted to point out, that (what I get as) correction, that ZIPs are encrypted with AES-256 is (may be) a little bit misleading. Nothing else, no offence.
Nov
7
comment Is using 'dot' and 'at' in email addresses in public text still useful?
Ah, I see your point. OK, I agree with you on URLencode and entities. But even your example shows, that first e-mail, from "pure" text" will be incorrect, but second one, using only dot and at chopping, will be all fine. But, then again... How can this be better (a little bit, but still) than using Javascript, which (when well written) can make a real mess to crawler, nearly invisible to normal user?
Nov
7
revised How reliable are device IDs provided by PhoneGap on Android and iOS?
deleted 41 characters in body