Comment Re:On The Up Side ... (Score 1) 187
What is the difference?, they are endless anyway.
What is the difference?, they are endless anyway.
It isn't just that, the whole security theater is really affecting it.
Me and my girlfriend were recently looking at plane prices to travel to the UK, and then came the realization that we were actually looking for options that did not make a scale in the US, leaving out pretty much any plane from any airline in the US.
I found it sad =/ (and I have to avoid them)
I mean, what in the world are the school administrators thinking? That parents are not going to care if they force their daughter to give them their log in information to their personal accounts?
Oh, and I just used my mod points =/
Seriously, why in the world would someone combine all that with a partner?
I am going to try this about right now O.o
They should have use duct tape.
Most of the world doesn't buy the story. As for me, I find physically impossible for a plane to completely pulverize a building.
oh, did the truth bother you?
The government of Hong Kong is independent of the government of China, find that information in a
ok, a hash+salt is not an option to do this, maybe it was at some point, but it isn't atm =/, the rest of the advice do applies tho.
http://codahale.com/how-to-safely-store-a-password/
That is about the best advice that I can give you, treat every single piece of data that comes from the outside world as malicious input, if you can validate against expected values or patterns, do just that, and discard anything that you aren't expecting.
Once an user is logged in, do not trust them, at all, be very careful with privilege escalation.
Use prepared statements for every single data that interacts with the database if this data leaves your control even for one operation, it doesn't matter if it comes from direct input, from a session variable, from a cookie, you check the data and use prepared statements ALWAYS.
Keep your software updated, if you need this to be secure, you can't just make one installation and feel good, you will have to be prepared to constantly update the software in the server, and there will be no end to this as long as you want a secure platform.
Protect the passwords in the database in case they are stolen, a hash+salt per password is an option to do this.
Security is not about preventing a hack, it is about reducing the chances that a hack occurs. If you have valuable information, you will get experience attacks, and you have very valuable information, you will eventually get hacked, you have to find every single hole in the software, the attacker only needs to find one.
Oh, that is rather unfair, I just came back from the other side of the world.
I just added you in G+, so I am guessing this is not the last that I hear from you, but it is going to be strange to not see your name in many articles in the future. Good look in your future endeavors.
I did get that.
What I thought about was South Park.
Of course not, I was intended to be humorous.
How many NASA managers does it take to screw in a lightbulb? "That's a known problem... don't worry about it."