Reputation
846
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 10
Newest
 Enlightened
Impact
~40k people reached

  • 0 posts edited
  • 0 helpful flags
  • 34 votes cast
Apr
8
awarded  Enlightened
Apr
8
awarded  Nice Answer
Jan
30
comment When to set security questions for a web application?
@GoliE I still answered your question. I proposed a third option that was neither of what you proposed. If you want the community to answer a question of A or B this question is a poll and should be flagged as such
Jan
30
comment When to set security questions for a web application?
@AronFoster the good news is this is a security focused website.
Jan
29
answered When to set security questions for a web application?
Nov
13
awarded  Yearling
Dec
5
awarded  Scholar
Dec
5
accepted Data integrity of malicious content in the database
Dec
5
comment Data integrity of malicious content in the database
Good feedback. I figured as much that the consumer of the data would be where we would want the checks to go, to ensure zero data loss.
Dec
5
comment Data integrity of malicious content in the database
indeed. Thanks for the insight. I guess I was trying to figure out the correct balance between storing malicious content (for others to view) vs making sure people aren't doing dumb stuff.
Dec
5
awarded  Student
Dec
5
comment Data integrity of malicious content in the database
sure agree. However, what about the scenario where I am a dba and I run a query and get back "jumbled" data? From a tool such as sql developer?
Dec
5
asked Data integrity of malicious content in the database
Nov
13
awarded  Yearling
Mar
1
asked Safely generate a non-log file within an application server
Dec
28
awarded  Autobiographer
Nov
13
awarded  Yearling
Oct
24
comment Password Security: Encrypting salt
I think your first bullet point is misinformed. If I can inject arbitrary data into the database, I most likely came from your app. Could you expound on that point?
Oct
4
comment What standards are there for mangaging high value passwords?
As an added I have had the "joy" of implementing these types of procedures.
Oct
4
comment What standards are there for mangaging high value passwords?
I don't think 128 bit encryption is that good these days.