network profile
| bio | website | debiki.com |
|---|---|---|
| location | Sweden | |
| age | 33 | |
| visits | member for | 1 year |
| seen | 2 days ago | |
| stats | profile views | 3 |
Software developer, building a hopefully better discussion system for blogs and forums.
|
May 7 |
accepted | Simple and secure remote installation method that accepts input via a web page? |
|
May 7 |
comment |
Simple and secure remote installation method that accepts input via a web page? Thanks! I'll probably take the automatically generated password.php approach, i.e. generated via the allocation/installation script. (Although it's Scala not PHP in my case). And then have the user include the password via a magic URL (which would be valid only before the installation). |
|
May 7 |
comment |
Simple and secure remote installation method that accepts input via a web page? @Adnan I've suggested some solutions, and actually I was wondering if I had suggested all "good" solutions and if this question was unnecessary. Still Iseri posted a different solution (below) that I had not thought about. |
|
May 7 |
comment |
Simple and secure remote installation method that accepts input via a web page? @Adnan You think it rather belongs to StackOverflow or some other site? |
|
May 7 |
comment |
Simple and secure remote installation method that accepts input via a web page? @Adnan "Is it possible to let the admin (i.e. the user that installs the software) define admin username and password via a HTML page, in a secure manner?", + how |
|
May 7 |
revised |
Simple and secure remote installation method that accepts input via a web page? added 24 characters in body |
|
May 7 |
asked | Simple and secure remote installation method that accepts input via a web page? |
|
Jan 8 |
awarded | Popular Question |
|
Jul 10 |
revised |
Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks? "clustered by" -> "sorted by" |
|
Jul 10 |
comment |
Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks? (I'm using PostgreSQL right now though. Cassandra wouldn't happen until after many years) |
|
Jul 10 |
comment |
Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks? I'd guess it'd take quite long to implement the ideal solution :-) And it'd take very long to verify that it works — I'm hoping that by simply using Cassandra the whole system would be a little bit more stable, without me having to write so much code :-) |
|
Jul 10 |
comment |
Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks? Hi Andrew! Thanks for your reply. Yes they'd each use a different FQDN. With "you redirect affected customer to a blackhole", you mean that traffic-to-the-tenant-under-attack would be dropped? |
|
Jul 9 |
asked | Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks? |
|
May 2 |
awarded | Commentator |
|
May 2 |
comment |
Can I trust the source IP of an HTTP request? >"Is IP address the best key for the rate limit?" -- Hmm, is there anything else? I can think of this: 1) IP address. 2) user id, if the user identifies him/herself. 3) Ethernet interface, e.g. eth0. But I cannot come up with any other keys. Perhaps subnet address in some manner? Or all IPs belonging to a certain country? Hmm. (Do you have some other ideas?) |
|
May 2 |
comment |
Can I trust the source IP of an HTTP request? If users authenticate themselves, then I currently intend to track resource usage (for disk usage, emails sent, database IO) in a quota system. And inform them nicely, when they're running out of quota. |
|
May 2 |
comment |
Can I trust the source IP of an HTTP request? Okay, so I might need to add rate limiting both in the firewall ( iptables) and in the application. It would actually be very easy to DoS the application, if only iptables did some rate limiting (some server functions do somewhat heavy database queries). But if iptables did no rate limiting, then I suppose generic DDoS attacks would become a lot easier. |
|
May 2 |
awarded | Scholar |
|
May 2 |
accepted | Can I trust the source IP of an HTTP request? |
|
May 2 |
awarded | Student |
