meta user
network profile
| bio | website | infotopie.nl |
|---|---|---|
| location | Netherlands | |
| age | 34 | |
| visits | member for | 1 year, 10 months |
| seen | May 16 at 8:37 | |
| stats | profile views | 16 |
Webmaster of http://www.infotopie.nl and http://www.vrijezending.nl
|
Aug 21 |
awarded | Caucus |
|
Jul 3 |
awarded | Yearling |
|
May 31 |
accepted | Encrypting configuration on shared IIS7 hosting that uses load balancing |
|
May 31 |
comment |
Encrypting configuration on shared IIS7 hosting that uses load balancing It's not for hiding from the hosing provider, but as a 2nd line when FTP gets compromised or something like that. The documentation on this tool: webconfigenc.codeplex.com was also quite informative (key containers) but as you say, will not help on shared hosting. Thanks for the hashing tip, it helped me to remember that its a standard feature in Forms-authentication so there's no custom code to write other than a small hashing tool used offline (msdn.microsoft.com/en-us/library/e01fc50a). Adding a salt only requires a minimal change in the login page. I'll be using that :-) |
|
May 29 |
asked | Encrypting configuration on shared IIS7 hosting that uses load balancing |
|
May 26 |
comment |
Risks of giving developers admin rights to their own PCs Besides the points that PipTheGeek made, almost all developers have their private set of helper tools that they use in order to be more productive on the job (hotkeys, luanchers, snippet-orgenizers, code generators, grep, Notepad++, etc...) Besides they use sysinternals-tools like process explorer to kill hanging processes. They also need access to eventlogs and other MMC-snap-ins, and use tools like regsvr32.exe to register their COM stuff... the list goes on and on... I cannot imagine doing my job without being at least local admin. Rather kick me off domain, only providing internet access. |
|
May 26 |
answered | Risks of giving developers admin rights to their own PCs |
|
May 24 |
awarded | Commentator |
|
May 24 |
comment |
lock for asp.net developer using vs 2010 and win xp? Whew, sure glad my boss doesn't require that of me! It would be quite a hassle not being able to copy-paste snippets from MSDN or Stack-Overflow, which especially for trainees may be a frequent action. Be sure to install the MSDN help files locally on the developer machines (a few Gigabytes), then at least they'll have that a a first resource. |
|
May 24 |
comment |
Information Security Career tracks - Academically vs. IT certifications Its a bit like that in the Netherlands as well, to a lesser extent. I guess this factor is tightly linked to culture and region. For example: I hardly ever prefix my name with my titles since it looks a bit "puffed up" from my perspective, however I have had colleges that would not hand over a business card if their "hard earned title" were not properly printed on it. It's common practice here for employers to ask their employees explicitly if they want their titles printed on their business cards or not. Any way, a title definitely has effect on the bandwidth of a salary in the Netherlands. |
|
May 21 |
comment |
Preventing a socially-engineered transaction Another channel can be a so-called token, or an sms to your cell phone. |
|
May 19 |
answered | Are GUID visible when compiling a .NET project? |
|
May 19 |
comment |
Using iframes to sandbox untrusted code I'm having trouble understanding the problem. It sounds like it's all client-side code (javascript)? What are the third party "views" for if they are in invisible iframes? Is it to enrich data presented elsewhere on the page? Then why not do this on the server side where you'll have much more control? |
|
May 18 |
comment |
DoS and Serialization see the part "Preventing Denial-of-Service Attacks" at msdn.microsoft.com/en-us/library/ms733135.aspx (the info also applies to Java). |
|
Apr 15 |
awarded | Popular Question |
|
Nov 18 |
accepted | How to test if a browser add-on is safe |
|
Nov 16 |
comment |
How to test if a browser add-on is safe Thanks mikeazo, the add-on is in chrome (they also have a firefox version). After investigation it is indeed just a small javascript "page" (never new add-ons were written like this). I didn't find anything shocking there, they're using the browser as a proxy to do the actual submissions, probably keeping them from being banned by the directories. Just to be safe I'll be using another browser without any add-ons when using pay-pal or on-line banking which I probably should have been doing all along. |
|
Nov 16 |
asked | How to test if a browser add-on is safe |
|
Nov 5 |
awarded | Teacher |
|
Nov 5 |
answered | How can I restrict what an application can do with my computer? |
