Reputation
922
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 8
Newest
 Yearling
Impact
~100k people reached

  • 0 posts edited
  • 0 helpful flags
  • 9 votes cast
Jul
25
awarded  Yearling
Aug
1
awarded  Notable Question
Jul
25
awarded  Yearling
Jul
25
awarded  Yearling
May
13
comment How can I punish a hacker?
This is how the Internet works. Doesn't everyone know about abuse@isp? If this was everyone's response as soon as attacks are discovered we would have far fewer attackers.
May
2
revised If someone steals my laptop while I'm logged in, how can I protect my browser?
added 113 characters in body
Apr
30
revised If someone steals my laptop while I'm logged in, how can I protect my browser?
added 227 characters in body
Apr
30
answered If someone steals my laptop while I'm logged in, how can I protect my browser?
Jan
10
awarded  Nice Answer
Dec
22
awarded  Good Answer
Dec
21
comment How can I explain SQL injection without technical jargon?
Agreed. I haven't had time to re-work it.
Dec
20
comment Does any database let you disable non-parameterized queries and therefore disable SQL injection?
I'm quite sure that if you use a prepared statement object the database receives the SQL statement without the parameters inserted. That way if the statement is cached already it doesn't have to parse the SQL again. In this case the database would know that the parameters were inserted safely.
Dec
20
comment Does any database let you disable non-parameterized queries and therefore disable SQL injection?
I'm not looking for real security on the database that can't be bypassed. I'm looking for something that would help me verify that all my code is using safe queries.
Dec
20
comment Does any database let you disable non-parameterized queries and therefore disable SQL injection?
Right, there has to be a way for the .NET framework to record that the string was built safely and this would be sent along with the SQL to the database.
Dec
20
asked Does any database let you disable non-parameterized queries and therefore disable SQL injection?
Dec
20
awarded  Nice Answer
Dec
20
answered How can I explain SQL injection without technical jargon?
Dec
19
awarded  Yearling
Dec
19
comment Is my developer's home-brew password security right or wrong, and why?
@jmoreno, right, which is why I said 'probably'. The main point is that the hashing must take time.
Dec
18
awarded  Supporter