Re: Code Security

From: Date: Fri, 13 Feb 2015 17:28:47 +0000
Subject: Re: Code Security
References: 1 2 3 4 5 6 7 8 9 10  Groups: php.db 
Request: Send a blank email to php-db+get-48960@lists.php.net to get a copy of this message
And in the same way, don't let him withdraw money from your account while your logged into the ATM. I mean it sounds like mr. Nice shouldn't have a business. At all. Best, Karl Sent from losPhone > On Feb 13, 2015, at 8:17 AM, "Arneson, Joshua" <joshua.arneson@mssm.edu> wrote: > > Ethan, > > It seems like you're looking for a programmatic solution to a physical security > problem. In the end, your most viable solution will likely be to train Mr. Goodguy to remove the key > the same way he needs to remember his ATM card after a withdrawal. I've seen programmatic > work-arounds to solve similar issues, but they have always ended up being significantly arduous for > the end users... > > Respectfully, > > Joshua D. Arneson > > -----Original Message----- > From: Ethan Rosenberg [mailto:erosenberg@hygeiabiomedical.com] > Sent: Friday, February 13, 2015 9:12 AM > To: php-db@lists.php.net > Subject: Re: [PHP-DB] Code Security > >> On 02/13/2015 02:58 AM, Karl DeSaulniers wrote: >> Prevent THIS from ever happening. >> >>> On Feb 12, 2015, at 11:03 PM, Ethan Rosenberg <erosenberg@hygeiabiomedical.com> >>> wrote: >>> >>> He asks Mr.[naive]Nice if he could look at the computer while it is logged in. >> >> >> Otherwise, I would say an external key that has a salt stored on it that the user has to >> insert in the computer before the system can be accessed. >> Like an access key card. Immediate shut down when tampered and/or removed.. >> >> Just a stab in the dark though. >> >> Best, >> >> Karl DeSaulniers >> Design Drumm >> >> https://urldefense.proofpoint.com/v2/url?u=http-3A__designdrumm.com&d= >> AwIC-g&c=4R1YgkJNMyVWjMjneTwN5tJRn8m8VqTSNCjYLg1wNX4&r=pRBqy2P3JaV_0yI >> qjAsPRpV2yZymYr9X5J_0Y74t654&m=kIedOn0p3VGnUZ1gfYdWWnG5241UJdD7tnYY_Ju >> HC18&s=ig7LiGzP4X2ZJJMrsq4695g43cu8ghuBAAdEq6F3jrY&e= > --- > > Karl - > > Thanks. > > The key is already plugged in. Mr [Naive] Nice is using the computer, and is logged in. Mr. > Ugly just want to "look at" the computer. > > Ethan > > > > -- > PHP Database Mailing List > (https://urldefense.proofpoint.com/v2/url?u=http-3A__www.php.net_&d=AwIC-g&c=4R1YgkJNMyVWjMjneTwN5tJRn8m8VqTSNCjYLg1wNX4&r=pRBqy2P3JaV_0yIqjAsPRpV2yZymYr9X5J_0Y74t654&m=kIedOn0p3VGnUZ1gfYdWWnG5241UJdD7tnYY_JuHC18&s=saaG6YC7fWss2eAYUsXw7GU0vdZKj74Uz3iVA1Enu40&e= > ) To unsubscribe, visit: > https://urldefense.proofpoint.com/v2/url?u=http-3A__www.php.net_unsub.php&d=AwIC-g&c=4R1YgkJNMyVWjMjneTwN5tJRn8m8VqTSNCjYLg1wNX4&r=pRBqy2P3JaV_0yIqjAsPRpV2yZymYr9X5J_0Y74t654&m=kIedOn0p3VGnUZ1gfYdWWnG5241UJdD7tnYY_JuHC18&s=b2pGut3zlmECebRRBhfyRBYokCPeQHk8ZPkcdNA2RzQ&e= > > > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php >

« previous php.db (#48960) next »