309 reputation
110
bio website
location
age 30
visits member for 2 years
seen 10 hours ago

1d
accepted Is sending plaintext passwords to a SQL Server database a security risk?
2d
comment Is sending plaintext passwords to a SQL Server database a security risk?
If the DB admin is untrustworthy, wouldn't it be a security risk since the DB admin is still able see plaintext passwords with SQL Server Profiler? Do you think hashing would provide more security in this case?
2d
awarded  Popular Question
Dec
15
awarded  Nice Question
Dec
15
asked Is sending plaintext passwords to a SQL Server database a security risk?
Nov
21
awarded  Yearling
Jul
17
awarded  Informed
Apr
11
comment What is the value in asking for a second password for sensitive operations?
Does it provide some security against phishing, or would an attacker try to get both passwords out of the user instead of just the one?
Apr
10
accepted What is the value in asking for a second password for sensitive operations?
Apr
10
asked What is the value in asking for a second password for sensitive operations?
Nov
25
revised Why do we ask for a user's existing password when changing their password?
fixed grammar
Nov
25
suggested approved edit on Why do we ask for a user's existing password when changing their password?
Nov
23
awarded  Analytical
Nov
22
awarded  Scholar
Nov
22
accepted Why do we ask for a user's existing password when changing their password?
Nov
22
awarded  Popular Question
Nov
21
awarded  Nice Question
Nov
21
awarded  Supporter
Nov
21
awarded  Student
Nov
21
revised Why do we ask for a user's existing password when changing their password?
added tag