|visits||member for||2 years, 7 months|
|seen||Sep 16 '14 at 13:52|
Software Development Engineer
- Information security
- Software design
|bio||website||ru.linkedin.com/in/okozlyuk||visits||member for||2 years, 7 months|
|location||Moscow, Russia||seen||Sep 16 '14 at 13:52|
Is an SSH session to a mistaken site a security exposure?
@Shadur: You mean "asymmetric keys", don't you?
Are these SQL injection checks a bad idea?
I'll add to that a little explanations on why blacklists won't work: there's plenty of attacks which don't require those keywords, example: websec.files.wordpress.com/2010/11/sqli2.pdf In many cases, it'd be hard to even whitelist the input. Parametrized SProcs are much better.