Reputation
598
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
2 12
Newest
 Nice Answer
Impact
~27k people reached

  • 0 posts edited
  • 1 helpful flag
  • 14 votes cast
Apr
28
comment Does read-only access to the database prevent sql injection?
@MichaelKjörling Yeah.. you're right... not sure of I've got the correct number of quotes now, but lets treat it as pseudocode :)
Apr
28
revised Does read-only access to the database prevent sql injection?
added 12 characters in body
Apr
28
awarded  Nice Answer
Apr
27
reviewed Approve Does read-only access to the database prevent sql injection?
Apr
26
answered Does read-only access to the database prevent sql injection?
Apr
15
comment If I use a VPN such as IP Vanish on my office network, can they see
yes, they will be able to see if they want
Dec
12
awarded  Popular Question
Sep
11
comment Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
Wouldnt you still be liable for the charges on the credit card?
Jul
25
comment Can sites which check your password as you type pose a security risk?
You can use fiddler to determine if its actually hitting the server with every keypress. And I assume it does pose a security risk since it makes bruteforce much easier (essentially xn instead of x^n attempts required)
Jul
25
asked Isnt the 3D secure system essentially completely ineffective in avoiding fraud?
May
6
answered What's the point of EMV when only the card is needed to shop online?
Mar
10
awarded  Commentator
Mar
10
accepted How is a “commonly used password” determined?
Mar
10
comment How is a “commonly used password” determined?
Using a static list does seem to have a major pitfall of not being updated frequently due to newly popular passwords ( xkcd.com/936 )
Mar
8
comment Why are there few (none?) easy to use encryption libraries?
Windows has DPAPI for thick clients
Mar
8
asked How is a “commonly used password” determined?
Nov
17
awarded  Yearling
Aug
14
comment Is it safe to show users why their password is not allowed?
Out of curiosity, why a "Too long" constraint? My limited understanding says that once you hash the password, it should be irrelevant
Jun
12
awarded  Citizen Patrol
Dec
6
accepted SQL — using string concatenation, how can I exploit this procedure?