|visits||member for||1 year, 4 months|
|seen||Dec 27 '13 at 13:28|
Software Development Engineer
- Information security
- Software design
|bio||website||ru.linkedin.com/in/okozlyuk||visits||member for||1 year, 4 months|
|location||Moscow, Russia||seen||Dec 27 '13 at 13:28|
Is an SSH session to a mistaken site a security exposure?
@Shadur: You mean "asymmetric keys", don't you?
Are these SQL injection checks a bad idea?
I'll add to that a little explanations on why blacklists won't work: there's plenty of attacks which don't require those keywords, example: websec.files.wordpress.com/2010/11/sqli2.pdf In many cases, it'd be hard to even whitelist the input. Parametrized SProcs are much better.