Comment Re:Yes, but other than that, how did you like it? (Score 1) 453
I am sure even MS rate-limits login attempts.
No they dont rate limit as that would be a DOS vector long before the bruteforced EoP vector
Comment Who fires by email? (Score 1) 333
Is that a thing ?
Comment Re:Web Application Firewall (Score 1) 333
WAF is only as good as the regex rules and quickly fall over if you have a non script kiddy playing with you. For example watch how many block sql injection of 'or 1=1' but miss 'or 2 not like 3'
Comment Apply the SDL approach (Score 1) 333
Actually implementing the security dev lifecycle is a good starter. At minimum create some threat models and identifiy the attack vectors and targets.
Slashdot Top Deals
The first rule of intelligent tinkering is to save all the parts. -- Paul Erlich
