327 reputation
311
bio website gaman.pl
location Upper Silesia, Poland
age 34
visits member for 1 year, 8 months
seen Apr 14 at 13:36

I'm just an average person, that uniquely combines strict, engineering mind with a non-schematic, humanistic and magical way of looking on life and surrounding world.

Add a little bit of madness, and you'll get entire picture of me! :]

I'm a developer, both desktop and mobile, with 15+ years of experience and 50+ small-to-big projects on account. In the very same time I'm a writer with similar experience and a lot of books, articles, blog posts or own blogs ideas on account.


Apr
11
accepted Is it reasonable to keep control panel in separate subdomain or domain?
Apr
11
comment Is it reasonable to keep control panel in separate subdomain or domain?
So, it seems, that we have two opposite answers here. Phillip claims, that my idea is a pure security-by-obscurity, which (in my understanding of this term) should be avoided at all costs (as it gives false feeling of security, when you're actually not secured at all). While, on the other hand, your answers suggests, that my idea could possible rise security of entire system. Only a small part of it, but still. On the other hand, it seems, that hanging ports and using the same domains gives us the same result, while reducing costs (no need to register and keep two domains). Right?
Apr
10
comment Is it reasonable to keep control panel in separate subdomain or domain?
Thanks for a detailed and enlightening answer. And for that funny comment. You made my day! :] My website is soooo secure, that no one can access it!
Apr
10
asked Is it reasonable to keep control panel in separate subdomain or domain?
Jan
31
comment How much information about the reason for an unsuccessful login should a web application give?
There's also third scenario -- not display anything to user. Wordpress (both .com and standalone, installable one) uses it. Enter either wrong password or e-mail or do anything, what prevent you from login, and all you'll get is a jQuery shaking login box, waiting for you to re-enter credentials.
Nov
8
comment How reliable are device IDs provided by PhoneGap on Android and iOS?
Thanks! Do you refer to a "typical" certificate, used in similar areas? Or to "certificate" -- any form of for example file or localDB entry on a mobile device, uniquely generated by my system and (at least at the beginning) able to be read only by my mobile application? I'm asking because second option should be fairly easily to handle by a PhoneGap Build application (one code, build once in the cloud for all platforms), while first one would probably require to have separate code set for each platform, and build it locally, as each platform has probably own certificate handling routines.
Nov
8
accepted How reliable are device IDs provided by PhoneGap on Android and iOS?
Nov
8
awarded  Commentator
Nov
8
comment Can password-protected zip files be broken without brute force?
I totally agree with you, of course. I just wanted to point out, that (what I get as) correction, that ZIPs are encrypted with AES-256 is (may be) a little bit misleading. Nothing else, no offence.
Nov
7
comment Is using 'dot' and 'at' in email addresses in public text still useful?
Ah, I see your point. OK, I agree with you on URLencode and entities. But even your example shows, that first e-mail, from "pure" text" will be incorrect, but second one, using only dot and at chopping, will be all fine. But, then again... How can this be better (a little bit, but still) than using Javascript, which (when well written) can make a real mess to crawler, nearly invisible to normal user?
Nov
7
revised How reliable are device IDs provided by PhoneGap on Android and iOS?
deleted 41 characters in body
Nov
7
asked How reliable are device IDs provided by PhoneGap on Android and iOS?
Nov
7
awarded  Editor
Nov
7
revised Can password-protected zip files be broken without brute force?
added 803 characters in body
Nov
7
comment Are there any regulations against financial companies storing passwords in plaintext?
@curiousguy Yeap, that makes sense to me now! :] Thank you...
Nov
7
comment Is using 'dot' and 'at' in email addresses in public text still useful?
This answer is a real gem, however presented image (chart) is something that hurts me really bad. I can't imagine (believe), that using at instead of @ and dot instead of . gives better results (less SPAM received) than using Javascript, HTML entities and Urlencode. There has to be some mistake here or I'm missing something / getting things wrong. As long as I've been reading about SPAM (past ten years) it was always said that methods given in question are the first that were adopted by spammers. How, then, can they be better than those more complex one like Javascript?
Aug
5
awarded  Yearling
Jun
10
awarded  Notable Question
May
20
awarded  Good Question
May
14
comment Are password-protected ZIP files secure?
I don't know about Unix and Linux (don't use them), but AFAIK you can work with archives directly from command-line, as these are either system components or external programs that ships with nearly every distro (not mentioning minimal ones). You install pure system and you have them, right? Try to achieve the same on Windows? Without manually installing 3rd-party programs you won't be able to use archives at all. Shell support for .zip was added in Windows XP. There is no shell and no command-line support at all for tar, rar, gzip on others on Windows. That's what I call native.