meta user
network profile
| bio | website | |
|---|---|---|
| location | Troy, NY | |
| age | 28 | |
| visits | member for | 8 months |
| seen | 9 hours ago | |
| stats | profile views | 315 |
|
13h |
comment |
Why standards organizations give so short protection times for 128 bit encryption? It is worth pointing out that quantum computers don't help much against symmetric encryption. It is primarily asymmetric encryption which is weakened by quantum computing due to the ability to factor large semi-primes. |
|
14h |
answered | Does providing OAuth for mobile apps pose a security threat? |
|
17h |
reviewed | Close Force clients to use proxy |
|
20h |
answered | Store username in cookie for a web site |
|
20h |
answered | Becoming a malware analyst? |
|
1d |
answered | Storing config securely in a semi trusted shared hosting environment |
|
1d |
comment |
Secure way to establish PHP database connections @Artfulrobot If they can't impersonate your scripts, then they can't access the configuration either. |
|
1d |
reviewed | Leave Open How to make a site vulnerable to SQLi? |
|
1d |
comment |
Certificate usage Can you include some details about your broader goals? This doesn't really seem to have enough information to ensure that the best approach is being taken. What do you mean by a middle ware solution answering certificate and ask credentials for SSO? You don't need anything in particular to make client certificates because they only need to be trusted by the service (or services) they are used to authenticate against. The rest of your question is too vague to answer though. |
|
1d |
comment |
How to make a site vulnerable to SQLi? @JacobKudria - In order to prevent SQL Injection, you have to sanitize input to make sure that it isn't an unexpected value. This varies based on the data. If it's a number, you make sure it's only numbers. Regardless you want to make sure that it can't contain any SQL keywords in a way they could be used and preferably want to use parametrized SQL so that even if SQL keywords were present, they wouldn't be executed. There are many ways that you can validate form input and no one solution is perfect in all cases. |
|
1d |
comment |
Secure way to establish PHP database connections @artfulrobot - right, but if they can upload their own scripts, then you are sunk no matter what you do as their scripts can impersonate your valid scripts and get the same object. The only alternative would be to do a nested SOAP type service for all the data and have a SOAP based DAL that is isolated from the general web. |
|
1d |
answered | How to make a site vulnerable to SQLi? |
|
1d |
reviewed | No Action Needed How to make a site vulnerable to SQLi? |
|
1d |
answered | Ways to look for changes on a PC |
|
1d |
answered | Secure way to establish PHP database connections |
|
1d |
answered | If a hacker is on the same Wifi Network as I am, what can he do? |
|
1d |
comment |
What about AD2P vulnerability? Any ideas on why this post got downvoted? |
|
1d |
comment |
Is there a dictionary of visibly similar Unicode characters for Spam processing? If you are specifically looking for English language filtering, why do you need a dictionary at all. Isn't the presence of non-latin characters evidence of SPAM by itself? |
|
1d |
reviewed | Leave Open Considerations for information exchange agreement between governmental agencies |
|
1d |
reviewed | Leave Open What are some recommended certifications that do not require industry experience? |
