1,200 reputation
39
bio website
location
age
visits member for 3 years, 2 months
seen Oct 31 at 19:52

Oct
5
awarded  Yearling
Oct
5
awarded  Yearling
Oct
5
awarded  Yearling
Oct
2
awarded  Scholar
Oct
2
accepted HP ProtectSmart In A Domain?
Jul
2
comment Securing AES 128 encrypted ZIPs against brute force attacks
I moved away from ZIP storage for the exact problem randomdude brought up: people generally will know these passwords, and they're hard to reset. Moved to a public/private key system, private key never leaves server, new public keys could be pushed if we really wanted to with little effort if someone really screwed up and leaked the private key, but there are many fewer hands with access to it than the ZIP password.
Jun
28
comment Linux or Windows- the security issue
Don't you know, Windows can't execute scripts!... Right guys?
Jun
28
revised Linux or Windows- the security issue
added 93 characters in body
Jun
28
answered Linux or Windows- the security issue
Jun
5
awarded  Citizen Patrol
May
29
revised Should passwords be revealed in error message?
added 191 characters in body
May
29
answered Should passwords be revealed in error message?
May
10
comment What risks do I have to consider when encrypting server side as opposed to client-side?
Who cares what the original password is? I'm just going to POST the MD5/SHA I scrapped of the network traffic to the server and log in as you. The only thing you prevent me from doing is using it against other sites, but I'm still fully able to violate the account on the server that uses this rather useless method of security.
May
4
comment How can I prevent my kids from bypassing my computer restrictions?
dd if=/dev/zero of=/dev/sda
May
4
comment How to make an iPhone app HIPAA compliant?
If he writes an app that is pulling from say... an HTTP based API, that should not end up in the webpage cache.
Apr
24
comment Source code security
"Someone suggested using Virtual desktops for all users, and where all copy options are disabled, means you cannot copy files between different virtual desktops or to any removable disks. Even remote users can login to their Virtual Desktop using a VPN Connection." Two monitors + pound code. It just makes it so it isn't easy, but anyone could do it over time.
Apr
23
comment Why most people use 256 bit encryption instead of 128 bit?
Actually if I had to guess, I'd suspect people store more stuff plaintext than they should encrypt/hash.
Apr
20
answered Hibernate SQL Injection - Fortify 360
Apr
10
comment Allow apache to write to users' .ssh dir's
I'd maybe walk down the route of passing useradd -M so it doesn't create the home directory, and having your script create it, chown/chmod to user:app 770 (app being a group that your app user is in, user of course being the user that you just created), with the only issue being that you have to give it access to create files in /home/ (or move their home directories to another location). I however am not really a Linux permission buff so take my ideas as to actual sane setup with a grain of salt till someone else can chime in here on maybe a more "Unixy" setup.
Apr
10
answered Allow apache to write to users' .ssh dir's