Reputation
21,394
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
4 63 105
Newest
 Guru
Impact
~974k people reached

Jul
7
revised How to protect ftp account information in the source code of a program
edited tags
Jul
7
comment How to protect ftp account information in the source code of a program
I know the difference. I hate ftps for it's firewall infriendlyness, that's why I named it last.
Jul
7
answered How to protect ftp account information in the source code of a program
Jul
5
awarded  Enlightened
Jul
5
awarded  Nice Answer
Jul
5
comment Webserver logs show someone is trying to hack my site, what should I do?
The magenta coloured ISP in Germany (one of the largest) is known to contact customers about infected machines.
Jul
5
awarded  Enlightened
Jul
5
awarded  Nice Answer
Jul
5
comment Solution to allow JavaScript input but prevent XSS
@AviD, You are right that a compromise of one server, which exposes the private, key affects all other server using the same key. In this case, however, there is only one server: The isolation is enforced by the java script engine in the client according to the same origin policy. Using individual certificates is not an option unless the userbaes is extremely small because it requires one IP address for every certificate to be compatible with common browsers.
Jul
3
comment Webserver logs show someone is trying to hack my site, what should I do?
I personally use the command line tool. heise.de/netze/tools/whois-abfrage for examples shows your the real output. ip-address.com obviously tries to do something smart with the whois output and fails miserably.
Jul
3
revised Webserver logs show someone is trying to hack my site, what should I do?
linked another whois tool which does not exclusifly talk about domains
Jul
3
comment Is it a bad idea for an information holder to e-mail a user their password?
[Hendrik tries hard to stop giggling...]
Jul
3
revised Webserver logs show someone is trying to hack my site, what should I do?
edited tags
Jul
3
answered Webserver logs show someone is trying to hack my site, what should I do?
Jul
3
revised Is it a bad idea for an information holder to e-mail a user their password?
edited tags
Jul
3
answered Is it a bad idea for an information holder to e-mail a user their password?
Jul
3
awarded  Disciplined
Jul
2
revised Secure jquery ajax calls from a non secure page
use official example domain instead of advertisting
Jul
2
answered Secure jquery ajax calls from a non secure page
Jul
2
comment Solution to allow JavaScript input but prevent XSS
As D.W. said this gets really complex and wildcard certificates, that are required to isolate one untrusted JavaScript code from another untrusted JavaScript code, are quite expensive. On a small site it is unlikely that you will make enough money with advertisement to recover those costs. So you should think in detail about whether arbitrary JavaScript code is really, really needed.