Reputation
1,026
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
3 7 17
Impact
~52k people reached

  • 0 posts edited
  • 1 helpful flag
  • 37 votes cast
Apr
15
awarded  Popular Question
Mar
24
awarded  Great Question
Mar
17
awarded  Famous Question
Nov
18
awarded  Self-Learner
Oct
14
accepted Is there any technical security reason not to buy the cheapest SSL certificate you can find?
Aug
8
awarded  Yearling
Jun
13
awarded  Favorite Question
Nov
21
awarded  Nice Question
Sep
17
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
This is an excellent answer, made all the more excellent by your inclusion of the users' perception. Perception is an ever present, if unwelcome, aspect of the security posture of any information system.
Aug
8
awarded  Yearling
Jul
26
awarded  Famous Question
Jul
2
awarded  Curious
Mar
2
answered Is jQuery.val() enough to prevent XSS
Dec
3
awarded  Notable Question
Nov
9
awarded  Notable Question
Oct
14
awarded  Good Question
Aug
8
awarded  Yearling
May
8
awarded  Popular Question
Oct
29
awarded  Popular Question
Oct
21
comment How can I avoid putting the database password in a perl script?
Given that we don't have very many database user accounts to manage, and given that my script only needs to run three different queries, I'm thinking that I'll create a database user that can only run three stored procedures, as you recommended. But I'll require that user to log in with a password. That, in concert with the config file and reversible encryption, will let me sleep at night. I much prefer layers of security, especially in systems that run automatically, so might get forgotten over time. Thank you again.