Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
4
Newest
 Scholar
Impact
~756 people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Aug
13
comment Doesn't hashing passwords server side mean a compromised website could leave passwords vulnerable?
@emory If you have write access to the database, yes.
Aug
12
comment Doesn't hashing passwords server side mean a compromised website could leave passwords vulnerable?
@MasonWheeler That assumes that the attacker's only goal is to access data which is stored in the database. What if his goal is to access a CMS and deface webpages, or delete user accounts by logging in as an admin?
Apr
23
comment Why does the user pick the password?
@Fogest Yes, it was sent in the mail with my MasterCard.
Apr
14
comment Why does the user pick the password?
Though it's not a one-to-one relationship, credit card companies in Canada have been choosing (chip card) PIN numbers for users for a long time.
Jan
14
comment Verifying credit card ownership
For the record, I have had experiences with Verified by Visa in which legitimate transactions were blocked.
Mar
16
accepted How can the low-water mark property apply to Bell-LaPadula?
Mar
16
answered How can the low-water mark property apply to Bell-LaPadula?
Mar
14
awarded  Scholar
Mar
13
comment How can the low-water mark property apply to Bell-LaPadula?
This was my initial instinct as well, but I got stuck on the mention of the "lowest upper bound". If we only ever lower the integrity level of the reader, where does the lub function come into play?
Mar
12
awarded  Student
Mar
12
asked How can the low-water mark property apply to Bell-LaPadula?
Dec
15
awarded  Supporter
Dec
12
awarded  Autobiographer