222 reputation
111
bio website timothy.green.name
location
age
visits member for 4 years
seen 5 hours ago

A qualified chemist who somehow drifted into web development. I've learned (to a greater or lesser degree of accuracy) PHP and JavaScript, and would like to learn something completely different for the sake of it. I'm a weirdo who actually enjoys reading (and sometimes writing) technical documentation.


Jul
21
comment What is the most secure way to protect a custom CMS from infiltration?
@mightyspaj. Maybe, maybe not. The point is that crypt() is difficult to use properly. Your custom function may or may not be using it correctly. password_hash() has been studied by some very fine minds, and is very simple to use. So use it.
Jul
14
comment Is it helpful to have a captcha on a login screen?
As a point of information, Register 365 have a CAPTCHA on their control panel login, so this is not unknown. (It's easy to bypass: just log in on the main site instead, then go to the control panel, so it's just pointless and annoying, but still, it's there.)
Jul
1
comment Is it neccessary that website certificate must have site URL?
"The www subdomain is treated as a special case." Source?
Jun
29
comment Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?
What makes a browser "official"? (I think the word you want is reputable.)
Apr
27
comment How can I explain SQL injection without technical jargon?
No. It explains what you can achieve with SQL injection. It explains precisely nothing about what SQL injection is. And slut-shaming is boring, unpleasant, and unwarranted on a "professional" site.
Apr
26
comment How can I explain SQL injection without technical jargon?
This does not in any way answer the question. It's merely a puerile joke, and contributes nothing valuable to this site.
Apr
7
comment Is there any reason for using private key 2 times when creating security hash?
Is it two private keys? My reading of the question was that it was the same private key, used twice.
Mar
4
comment Untrusted connection visiting https://www.opensource.apple.com/
@Zboson. I vaguely recall that Internet Explorer is lax about certificate checking where the only difference is the www.
Nov
15
comment Content hashes to help protect resources being fetched from a CDN
Related? patents.stackexchange.com/q/4697/267
Oct
21
comment One liner to create passwords in linux?
Very similar to my function password_generate { head -c ${1-12} /dev/urandom | base64; }.
Sep
5
comment What does this javascript file do? Is this a virus?
Why would you be 100% sure about what sites other people have visited?
Jul
15
comment How to filter POST requests before they reach PHP on Apache?
Why are your usernames and passwords restricted to 16 characters?
Jun
23
comment How can I protect my eCommerce site from stolen credit cards?
The generic name for that kind of thing, @RodMacPherson, is 3D Secure. Visa, MasterCard, and American Express all follow the same standard.
Apr
24
comment How can I create a password that says “SALT ME!” when hashed?
@Rik. Code Golf SE is actually for programming puzzles in general. (See their popular "code-trolling" tag for some non-golf examples.)
Jan
24
comment Why are chips safer than magnetic stripes?
It really is hard to believe that the USA is still using non-chip cards. I think I vaguely remember my parents having those when I was a young kid.
Oct
7
comment How to be secure your page from Zeus Trojan?
An attack like what? (I'm not watching a YouTube video from work.)
Sep
18
comment What are the reasons this SQL injection code wouldn't work?
I think that PHP allows only one MySQL query at a time.
Aug
22
comment How can I choose a strong password that is easy use on a smartphone?
Very nice, but it's actually referenced in the question, so I don't see what it adds as an answer.
Aug
8
comment Are there any guidelines for passwords that need to be read out loud?
@TobiasKienzler. That's not the "British Pound". It's the pound. The Irish pound and the Cypriot pound used the same symbol, and so, according to Wikipedia, do the Egyptian, Syrian, and Lebanese pounds. (It's also Shift+3, by the way.)
Jul
5
comment Prevent my site from being copied
HT Track respects exclusions in robots.txt, but "any similar program" might not.