| bio | website | slott-softwarearchitect.blogs… |
|---|---|---|
| location | Norfolk, VA | |
| age | 56 | |
| visits | member for | 1 year, 11 months |
| seen | Feb 20 '12 at 10:47 | |
| stats | profile views | 37 |
Software Architect, aspiring writer. Programmer for well over 30 years, about 70% of my working life.
Blog: S.Lott-Software Architect.
Books: Building Skills.
Technorati: SLott.
LinkedIn: Profile.
Ohloh: s_lott.
|
Jan 25 |
comment |
What should I do when my boss asks me to fabricate audit log data? "Should I cut and run now?" What's stopping you from leaving? The request is unethical. Why not leave right now? What's preventing you? |
|
Jul 28 |
comment |
Aren't permanantly logged in accounts inherently insecure? @nealmcb: Are you saying I can't use it as a generic term? If so, what's the generic term for using more than one factor? |
|
Jul 28 |
awarded | Teacher |
|
Jul 27 |
comment |
Aren't permanantly logged in accounts inherently insecure? @Jack M.: "Satellite internet users, who also hop IP addresses frequently" Absolutely. Using JavaScript window.screen is pretty popular. |
|
Jul 27 |
answered | Aren't permanantly logged in accounts inherently insecure? |
|
Jul 27 |
comment |
Aren't permanantly logged in accounts inherently insecure? @KeithB: Correct. Indeed, you might be able to buy a few cups of coffee for sysadmins at Starbucks and get passwords without using any technical means. Social engineering works wonders. |
|
Jul 27 |
comment |
Aren't permanantly logged in accounts inherently insecure? Do you realize how many candidate 64-bit cookie values there are? Do the math. I think you'll find that heat death of the universe occurs before any kind of "eventually" test that probes random hash codes looking for a winner. |
|
Jun 22 |
awarded | Autobiographer |
|
Jun 22 |
awarded | Supporter |