meta user
network profile
| bio | website | ROCKYOU.fm |
|---|---|---|
| location | Germany | |
| age | 25 | |
| visits | member for | 2 years, 6 months |
| seen | Mar 25 at 0:23 | |
| stats | profile views | 7 |
B.Sc. in Computer Science
Computer science student (M.Sc.), hobby programmer, network administrator / developer in the GameSurge IRC network
😻
|
Nov 14 |
awarded | Commentator |
|
Nov 14 |
comment |
How to restrict skype file transfer outside of LAN Limited accounts for developers are a horrible idea... |
|
Nov 14 |
comment |
How to restrict skype file transfer outside of LAN Maybe you should start trusting your developers?! And that drag&drop failure is likely to be noticed quickly - maybe even before the other end accepted the transfer - or goes to someone with no malicious intent who won't spread the file. |
|
Oct 25 |
comment |
How to encrypt database connection credentials on a web server? That means the PHP code has access to everything needed to decrypt it. And that means any hacker with access to it can also retrieve the necessary information. |
|
Oct 19 |
revised |
How to encrypt database connection credentials on a web server? added 63 characters in body |
|
Oct 19 |
comment |
How to encrypt database connection credentials on a web server? Environment variables will not affect other processes which are not subprocesses of the current one. So you'd need to put this into apache itself. So why not simply put the environment variable in plaintext in the apache config which could have 600/root permissions. |
|
Oct 18 |
answered | How to encrypt database connection credentials on a web server? |
|
Sep 28 |
awarded | Critic |
|
Sep 5 |
comment |
Safe User Login Questions True, in your case it might not be a huge issue, especially if the usernames are unknown, too - i mainly mentioned it for the sake of completeness. |
|
Sep 5 |
comment |
Safe User Login Questions I was talking about DoSing the user account - i.e. try logging in with multiple passwords to prevent the actual user from using his account. |
|
Sep 5 |
comment |
Safe User Login Questions DoS is always a problem if you have per-account logs after invalid logins. That's unrelated to any status code you return. |
|
Sep 5 |
awarded | Yearling |
|
Sep 4 |
answered | Safe User Login Questions |
|
Aug 19 |
awarded | Caucus |
|
Aug 9 |
revised |
Send credit card info by email from HTTPS and SMTP on SSL remove noise |
|
Aug 9 |
suggested | suggested edit on Send credit card info by email from HTTPS and SMTP on SSL |
|
Jul 4 |
awarded | Editor |
|
Jul 4 |
revised |
What are the security risks when using free Content delivery networks (CDNs)? added 20 characters in body |
|
Jul 3 |
comment |
What are the security risks when using free Content delivery networks (CDNs)? "for IE users the CSS could also cause arbitrary JavaScript code to be executed" (via behavior) - did I miss a way that works in other browsers? |
|
Jul 3 |
answered | What are the security risks when using free Content delivery networks (CDNs)? |
