169 reputation
3
bio website slott-softwarearchitect.blogs…
location Norfolk, VA
age 58
visits member for 3 years, 5 months
seen Feb 20 '12 at 10:47

Software Architect, aspiring writer. Programmer for well over 30 years, about 70% of my working life.

Blog: S.Lott-Software Architect.

Books: Building Skills.

Technorati: SLott.

LinkedIn: Profile.

Ohloh: s_lott.


Jan
25
comment What should I do when my boss asks me to fabricate audit log data?
"Should I cut and run now?" What's stopping you from leaving? The request is unethical. Why not leave right now? What's preventing you?
Jul
28
comment Aren't permanantly logged in accounts inherently insecure?
@nealmcb: Are you saying I can't use it as a generic term? If so, what's the generic term for using more than one factor?
Jul
27
comment Aren't permanantly logged in accounts inherently insecure?
@Jack M.: "Satellite internet users, who also hop IP addresses frequently" Absolutely. Using JavaScript window.screen is pretty popular.
Jul
27
comment Aren't permanantly logged in accounts inherently insecure?
@KeithB: Correct. Indeed, you might be able to buy a few cups of coffee for sysadmins at Starbucks and get passwords without using any technical means. Social engineering works wonders.
Jul
27
comment Aren't permanantly logged in accounts inherently insecure?
Do you realize how many candidate 64-bit cookie values there are? Do the math. I think you'll find that heat death of the universe occurs before any kind of "eventually" test that probes random hash codes looking for a winner.