Could someone please provide me with some guidance for a system I am designing...
A general overview of the system is that it is to store information on staff and "customers" - this information must be completely secure as it is highly sensitive! Staff must be able to access this information r...
@Gilles IMO, it's not necessarily to broad. He's not asking how to build the system, but specifically for guidance on choosing the model. I think that's appropriate.
@Gilles I'm a computer engineer. I'll agree this is off topic on here (posted this before I knew about sec.se). However, information security is a pretty broad term, and certainly covers aspects that involve development. There are developers who write cryptosystem code. There are also developers who write exploit code. The term for non-developers in infosec is 'script kiddie', not 'highly qualified professional'. — root11 mins ago
@ton.yeung it depends on your job as well I guess, often if you want to start as a security officer you would need to show that you have experience, so often they require you to have CISSP and/or CISA
I'm.. but maybe I'd rather being at the technical side more than the management
emmm
I don't really know
you mean in general?
well, I think only things related to studying. My grades, the project that I've made.
Developing software..
Not really
Yes
I enjoy doing presentations
I wish I could be a famous speaker
@ton.yeung my dream job is actually to work at Cisco or Google :p
of course
THeir achievements
@ton.yeung I can't think of one, being able to provide new technologies and applications with high quality, number of customers who use their services around the world.. mmmm having all that with 0 debt < This one for google :P I don't know
And I like how they can keep and manage their business..
@HamZa Most of the time I do development work (Desktop applications with HTML5, you know, multi-platform). About once a week I get some security-related task (code audit, secure configurations, very basic stuff)
@HamZa Well the answer should point out that in free AVs some functionality might be missing, or thereabouts... and it's not a crap question because I've had many asking me same one before, so "not crap because it needs to be answered" (if it wasn't before already)
And while we're at it... they might get different updates... for example, PC 1 updates through server A, PC 2 through server B, server B didn't yet get the latest updates from server A... It might happen, I've seen it before. But of course, they both update to same versions eventually
AVs usually cycle through servers, or select a random one from the list
@HamZa I can. I've set on PCs of peeps that were asking me similar stuff to update every hour, instead of default once a day. I've never heard them complain later on... oh, and sometimes I add a few more reliable servers to the list manually from the pro version ;)
Just a quick question regarding writing to a database and password security.
I am using a little bit of code that I will show below to create a hashed password for my users. Is this a sufficient level of password security? If not, how can I upgrade my idea?
<?php
//Start session + connect to...
@Gilles Then add this to your answer :P Look, I realize it's too broad and should probably be closed as such, but we've so far commented on the question here more than in the actually question, and that's not really helping OP. And I don't wanna defend some borderline interesting question too much either LOL I thought it might be worth moving it to SU so it gets some answer from the more general perspective, but maybe I was wrong, it happens.
It was an overheard al qaeda message apparently. The US reckoned it was an immediate threat so closed embassies in the middle east and started flying folks out of danger
@lynks and the bear looks around for any signs of being observed too ... it's really cute and smart also, taking the container to a more peaceful location :)
I think comment like that involve inside jokes (PHP-related humour) that we have here in the DMZ shouldn't real spill out to the general public. It might mislead many people.
The thing is, people don't read. They don't read the question, and they don't read the answers. When they see a bolded part, their eyes automatically go there. They no longer have to feel guilty for voting without reading. They feel as if they can get away with it because they understood the premise of the answer, which is the bolded part.
I do that with security advisories in the company all the time. People know they should read the email, but they don't. By bolding the important parts, they read them to get the feeling that they did what they should.
@Simon If your answer is one line or two, yes, do that.
Questions that make it into the super collider tend to create loads of not-particularly well-deserved rep for those who answer. So, they are called rep trains.
The idea is that you jump on the train by adding an answer, and wait for random people to start upvoting you.
Just a quick question regarding writing to a database and password security.
I am using a little bit of code that I will show below to create a hashed password for my users. Is this a sufficient level of password security? If not, how can I upgrade my idea?
<?php
//Start session + connect to...
