Reputation
946
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 7 16
Impact
~42k people reached

  • 0 posts edited
  • 1 helpful flag
  • 37 votes cast
Nov
18
awarded  Self-Learner
Oct
14
accepted Is there any technical security reason not to buy the cheapest SSL certificate you can find?
Aug
8
awarded  Yearling
Jun
13
awarded  Favorite Question
Nov
21
awarded  Nice Question
Sep
17
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
This is an excellent answer, made all the more excellent by your inclusion of the users' perception. Perception is an ever present, if unwelcome, aspect of the security posture of any information system.
Aug
8
awarded  Yearling
Jul
26
awarded  Famous Question
Jul
2
awarded  Curious
Mar
2
answered Is jQuery.val() enough to prevent XSS
Dec
3
awarded  Notable Question
Nov
9
awarded  Notable Question
Oct
14
awarded  Good Question
Aug
8
awarded  Yearling
May
8
awarded  Popular Question
Oct
29
awarded  Popular Question
Oct
21
comment How can I avoid putting the database password in a perl script?
Given that we don't have very many database user accounts to manage, and given that my script only needs to run three different queries, I'm thinking that I'll create a database user that can only run three stored procedures, as you recommended. But I'll require that user to log in with a password. That, in concert with the config file and reversible encryption, will let me sleep at night. I much prefer layers of security, especially in systems that run automatically, so might get forgotten over time. Thank you again.
Oct
21
comment Is there any security value of creatively naming folders containing sensitive files?
+1 for coming up with a use case where security through obscurity might possibly succeed in defeating an attacker (nosey little sister). :)
Oct
21
comment Is there any security value of creatively naming folders containing sensitive files?
Well, explaining that should really just be step one in answering a question like this. A blanket dismissal of security through obscurity has an attached danger too. If a person has the idea that it is all the security they need, which is what your answer is trying to address, then that person will probably be out of ideas after your comment. A person who believes that this is a good way to secure data really needs some new information about how to properly secure their data, not just a dismissal of their naïveté.
Oct
20
answered Why are simple packet filter firewalls insufficient for the protection of web applications?