876 reputation
58
bio website blog.botha.us/sarel
location Lakeland, FL
age 33
visits member for 3 years, 4 months
seen 2 days ago

Am originally from South Africa. I love learning more ways to do things so I can do them better. I write mostly Java code, but I've used many languages and platforms.


Aug
1
awarded  Notable Question
Jul
25
awarded  Yearling
Jul
25
awarded  Yearling
May
13
comment How can I punish a hacker?
This is how the Internet works. Doesn't everyone know about abuse@isp? If this was everyone's response as soon as attacks are discovered we would have far fewer attackers.
May
2
revised If someone steals my laptop while I'm logged in, how can I protect my browser?
added 113 characters in body
Apr
30
revised If someone steals my laptop while I'm logged in, how can I protect my browser?
added 227 characters in body
Apr
30
answered If someone steals my laptop while I'm logged in, how can I protect my browser?
Jan
10
awarded  Nice Answer
Dec
22
awarded  Good Answer
Dec
21
comment How can I explain SQL injection without technical jargon?
Agreed. I haven't had time to re-work it.
Dec
20
comment Does any database let you disable non-parameterized queries and therefore disable SQL injection?
I'm quite sure that if you use a prepared statement object the database receives the SQL statement without the parameters inserted. That way if the statement is cached already it doesn't have to parse the SQL again. In this case the database would know that the parameters were inserted safely.
Dec
20
comment Does any database let you disable non-parameterized queries and therefore disable SQL injection?
I'm not looking for real security on the database that can't be bypassed. I'm looking for something that would help me verify that all my code is using safe queries.
Dec
20
comment Does any database let you disable non-parameterized queries and therefore disable SQL injection?
Right, there has to be a way for the .NET framework to record that the string was built safely and this would be sent along with the SQL to the database.
Dec
20
asked Does any database let you disable non-parameterized queries and therefore disable SQL injection?
Dec
20
awarded  Nice Answer
Dec
20
answered How can I explain SQL injection without technical jargon?
Dec
19
awarded  Yearling
Dec
19
comment Is my developer's home-brew password security right or wrong, and why?
@jmoreno, right, which is why I said 'probably'. The main point is that the hashing must take time.
Dec
18
awarded  Supporter
Dec
18
answered Is my developer's home-brew password security right or wrong, and why?