Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:ERROR (Score 2) 386

It isn't just that, the whole security theater is really affecting it.

Me and my girlfriend were recently looking at plane prices to travel to the UK, and then came the realization that we were actually looking for options that did not make a scale in the US, leaving out pretty much any plane from any airline in the US.

I found it sad =/ (and I have to avoid them)

Comment Don't trust anything, don't trust anyone. (Score 1) 333

That is about the best advice that I can give you, treat every single piece of data that comes from the outside world as malicious input, if you can validate against expected values or patterns, do just that, and discard anything that you aren't expecting.
Once an user is logged in, do not trust them, at all, be very careful with privilege escalation.
Use prepared statements for every single data that interacts with the database if this data leaves your control even for one operation, it doesn't matter if it comes from direct input, from a session variable, from a cookie, you check the data and use prepared statements ALWAYS.
Keep your software updated, if you need this to be secure, you can't just make one installation and feel good, you will have to be prepared to constantly update the software in the server, and there will be no end to this as long as you want a secure platform.
Protect the passwords in the database in case they are stolen, a hash+salt per password is an option to do this.
Security is not about preventing a hack, it is about reducing the chances that a hack occurs. If you have valuable information, you will get experience attacks, and you have very valuable information, you will eventually get hacked, you have to find every single hole in the software, the attacker only needs to find one.

Slashdot Top Deals

How many NASA managers does it take to screw in a lightbulb? "That's a known problem... don't worry about it."

Working...