The DMZ

« first day (2120 days earlier) ← previous day next day → last day (3058 days later) »

Stack Exchange

06:43

'Copy and paste from a random thread on a website' is the hardest to predict, and depends on the specific website, programming language, tone of the description, and current phase of the moon.

5 hours later…

user5348fh8y5

11:53

hi all, i am new to php, i am doing login mysql project, in google lot of links are available with ready code, as i need to finish project soon i have to use one of the links code, can anyone please guide me which link is having most secure code : link1 :
http://www.codingcage.com/2015/04/php-login-and-registration-script-with.html

[link2 :
http://www.9lessons.info/2016/04/php-login-system-with-pdo-connection.html

[link3 :
http://thisinterestsme.com/php-user-registration-form/

Adi

12:13

@user5348fh8y5 Link 1 is most secure

Terry Chia

@user5348fh8y5 No, Link 2 is most secure.

user5348fh8y5

@Adi @TerryChia Thanks a lot guys ......

expecting reviews from other members......

Terry Chia

I'm just kidding. :P Go with #1.

Adi

@user5348fh8y5 Terry has no clue what he's talking about

@user5348fh8y5 You don't need other members. All you need is my opinion.

which is the correct one.

Actually, it's not an opinion - it's a fact.

by the mere virtue of me stating it

user5348fh8y5

guys looks like this chat room is most wonderfull i have saw until now @TerryChia oh, thanks a lot for support..... @Adi sure i trust you boss, i forgotten to post onem orel ink, please review this link also once : daveismyname.com/login-and-registration-system-with-php-bp

Terry Chia

12:20

English I don't even.

Adi

@user5348fh8y5 Sure, I can take a look. Would you like my Bitcoin (or PayPal) address to send me money?

My hourly rate is 150 euros

Terry Chia

I'll do it for a beer an hour.

FEED ME!

user5348fh8y5

sure @Adi , will do that :-)

@TerryChia so nice of you :-)

Adi

@TerryChia Beer/h? Unless that beer is Samuel Adams' Utopias, that's too cheap

but I guess that goes well with the level of service you'd provide anyway, so yeah.. suitable price

Terry Chia

My feelings have been bruised. I'm going to take a shower and rethink my life choices.

user5348fh8y5

13:19

@Adi i got your paypal address details from terry, so i deposited 160 euros [ 150 for your help + 10 for beer ]

1 hour later…

Adi

14:37

@user5348fh8y5 Perfect. Thanks, buddy. I just received the money.

Glad doing business with you

WhiteWinterWolf

15:16

Hi everybody!

Currently studying for CISSP, I seem to fail regularly on similar questions asking for the "crucial link" / "critical factor" / etc. in IT security.

I wonder if there is an issue in my reasoning, or if I just have to assume that as far as CISSP is concerned management is the alpha & omega of security and just put aside any personal opinion.

Sample questions:

Which of the following is a critical factor for implementing a successful data classification program?
A. Executive sponsorship
B. Information security sponsorship
C. End-user acceptance
D. Internal audit acceptance

I would answer C, since if users do not accept to abide by the classification program (users think that some data should be made public instead of being kept private for instance, or find it easier to put everything at the lowest classification level for easier sharing with colleagues), then you're open to any kind of leak and you're screw, and "executive sponsorship" (which is the expected answer) will be of no help.

Another question:

Which one of the following is the MOST crucial link in the computer security chain?
A. Access controls
B. People
C. Management
D. Awareness programs

I would answer D, since the key factor for a really effective security is that all people fully understand their (what they should do, and why this is important) and get engaged. However the expected answer is C, but I do not think that management is sufficient to constitute the whole "computer security chain", even more if nobody in the company does really care due to the lack of awareness...

crovers

I think the idea there is that without management buy-in, anything that adds 'friction' to work will be skipped. Even end-user buy-in isn't sufficient, since management will demand it get done faster, even if that means skipping or violating classification policies.

Whereas WITH management buy-in, you can drive end-user acceptance, both with training, but also with policies and, for lack of a better word, threats - with management buy-in, violating policy becomes a career-limiting-move - without it, violating policy can be advantageous

M'vy

Before selling security to people, you have to sell it to the boss

WhiteWinterWolf

15:32

Thank you both, that's indeed makes sense. There indeed to seem numerous questions where several options are valid, but he right one corresponds to the first initial step without which all the rest will most probably fail.

Same thing here: manage the manager first, and only then you will be able to talk about awareness, training and secure processes :)

Terry Chia

@WhiteWinterWolf You are overthinking this.

CISSP is a test, like all tests they are looking for the expected answer, no the right one.

WhiteWinterWolf

15:48

@TerryChia Maybe, hence my doubts :) . But for most questions I saw until now, they still seem to be closer to the real world than, say, a CEH exam ;) !

5 hours later…