51 reputation
2
bio website
location
age
visits member for 3 years, 2 months
seen Mar 23 at 2:13

Feb
11
comment How do you detect load balancing?
A non-standard cookie could be one that was not added by the web application or server in a single server setup that would help give away that the site is behind a load balancer. The headers may also be different and set to a non-standard webserver that is specific to load balancers.
Feb
10
answered How do you detect load balancing?
Jan
9
answered Client is not storing Credit Cards Securily (near plain text). How do I convince client to be more secure?
May
11
awarded  Teacher
Sep
9
comment What are the likely threats to a public-facing DB instance?
With the security risks involved, I would advise speaking with your management on this so they are fully informed about what you are wanting to do and how you will be securing it. As normally it is Senior Management that makes the decision on the cost vs risk decisions and the engineers/administrators implement it.
Sep
9
comment What are the likely threats to a public-facing DB instance?
If still using the VPN very low. If you are the target of a SQL Bot medium as many bots are programmed to not stop trying unless they are blocked, but keeping MySQL updated should help reduce this.
Sep
9
comment What are the likely threats to a public-facing DB instance?
Using SSL will help prevent ease dropping on the SQL user credentials which by default are transmitted in plain text. If not encrypted all they would need to do is listen to database traffic to see the credentials. With the credentials protected it lowers the possibility of others using credentials of the database in their own application that might have SQL injection flaws. If they do not have those credentials they cannot do anything in terms of SQL, but there is still the possibility of the server being exploited if they used a 0-day exploit.
Sep
9
comment What are the likely threats to a public-facing DB instance?
As being the DBA/System administrator you job is to insure security of the Systems. Allowing any ip access is removing a critical part of securing access to the database. From the comment from Steve it sounds like he wants to remove the use of a VPN which reduces the security another layer. If the database was exploited a 3rd party could gain access and make an app to use the database which could be vulnerable to SQL injection. You can be fired for not securing the systems/data you are hired to protect.
Sep
9
answered What are the likely threats to a public-facing DB instance?
Sep
6
comment What security implications are there for allowing outbound SSH traffic?
Yes, I used the wrong one, thank you. I've also seen some setups where it's deny all (whitelist) and if you need something it has to go to an approval board and you have to plead your case with why you feel your recommended additions need to be added.
Sep
6
awarded  Editor
Sep
6
revised What security implications are there for allowing outbound SSH traffic?
edited body
Sep
5
answered What security implications are there for allowing outbound SSH traffic?
Sep
5
answered How safe is it to install XAMPP on my home computer to test PHP code?