245 reputation
29
bio website pelicandd.com
location France
age 27
visits member for 2 years, 7 months
seen Sep 13 at 20:36

Freelance developer for the last six years, I'm specializing myself in quality and productivity for the last two years. I spent the last year working in a Dilbertesque company, watching people doing everything they can to make projects fail.

For a long time, I worked with Microsoft technologies, but recently started to build Linux-based DevOps infrastructure—an excellent way to learn lots of new things.

I'm mostly active on Programmers.SE, but try to participate on other sites as well.

Do you want to:

Feel free to contact me by email at arseni.mourzenko@gmail.com.


Sep
13
awarded  Teacher
Sep
12
comment How to identify hackers based on ip addresses and the pages that were accessed
Are they harmful to your business? If yes, ask yourself exactly how much loss do they cause? A few actual hacking requests per minute equals a few kilobits of bandwidth and a small amount of computing power wasted—not good, but you can live with it. On the other hand, if you spend three hours per month dealing with blacklisting, it means that your company spends $400-$600 for your salary doing just that: it would be much less expensive to ignore those requests.
Sep
12
comment How to identify hackers based on ip addresses and the pages that were accessed
@ganders: not necessarily. I've seen lots of activity which looks strange at the first glance, but which then appears to be perfectly legit. The actual queries you quoted might as well come from something similar to an RSS client.
Sep
12
comment How to identify hackers based on ip addresses and the pages that were accessed
@ganders: about the downvotes, you may focus on your first two questions and remove the last one. You may also rephrase the title: as-is, it is too broad and can only be answered by a book, maybe several books.
Sep
12
answered How to identify hackers based on ip addresses and the pages that were accessed
Jun
16
awarded  Popular Question
Apr
18
awarded  Yearling
Apr
11
awarded  Notable Question
Jul
7
awarded  Popular Question
Jun
20
awarded  Nice Question
Nov
20
awarded  Citizen Patrol
Jun
25
comment Why do password strength requirements exist?
possible duplicate of What best practices should be employed in a PHP login script?
May
17
comment Where do I find more information about a given hacking attempt requests to my website?
@Ramhound: I discovered after writing this question that wpad.dat is related to Web Proxy Autodiscovery. Effectively, according to logs, wpad.dat requests were always done from the local network machines.
May
16
accepted Where do I find more information about a given hacking attempt requests to my website?
May
16
asked Where do I find more information about a given hacking attempt requests to my website?
Apr
11
accepted What is the danger of hosting your SSL certificate yourself?
Apr
11
asked What is the danger of hosting your SSL certificate yourself?
Feb
15
accepted Does prepending a salt to the password instead of inserting it in the middle decrease security?
Feb
15
comment Does prepending a salt to the password instead of inserting it in the middle decrease security?
+1. I think this is a good candidate for a canonical answer. As for "you probalby either find a way to extract the password hashing algorithm of the website", well, most attacks are based on SQL Injection, which doesn't give access to the hashing algorithm details.
Feb
15
awarded  Supporter