Re: Code Security
| From: | Karl DeSaulniers | Date: | Fri, 13 Feb 2015 17:28:47 +0000 |
| Subject: | Re: Code Security | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-48960@lists.php.net to get a copy of this message | ||
And in the same way, don't let him withdraw money from your account while your logged into the
ATM. I mean it sounds like mr. Nice shouldn't have a business. At all.
Best,
Karl
Sent from losPhone
> On Feb 13, 2015, at 8:17 AM, "Arneson, Joshua" <joshua.arneson@mssm.edu> wrote:
>
> Ethan,
>
> It seems like you're looking for a programmatic solution to a physical security
> problem. In the end, your most viable solution will likely be to train Mr. Goodguy to remove the key
> the same way he needs to remember his ATM card after a withdrawal. I've seen programmatic
> work-arounds to solve similar issues, but they have always ended up being significantly arduous for
> the end users...
>
> Respectfully,
>
> Joshua D. Arneson
>
> -----Original Message-----
> From: Ethan Rosenberg [mailto:erosenberg@hygeiabiomedical.com]
> Sent: Friday, February 13, 2015 9:12 AM
> To: php-db@lists.php.net
> Subject: Re: [PHP-DB] Code Security
>
>> On 02/13/2015 02:58 AM, Karl DeSaulniers wrote:
>> Prevent THIS from ever happening.
>>
>>> On Feb 12, 2015, at 11:03 PM, Ethan Rosenberg <erosenberg@hygeiabiomedical.com>
>>> wrote:
>>>
>>> He asks Mr.[naive]Nice if he could look at the computer while it is logged in.
>>
>>
>> Otherwise, I would say an external key that has a salt stored on it that the user has to
>> insert in the computer before the system can be accessed.
>> Like an access key card. Immediate shut down when tampered and/or removed..
>>
>> Just a stab in the dark though.
>>
>> Best,
>>
>> Karl DeSaulniers
>> Design Drumm
>>
>> https://urldefense.proofpoint.com/v2/url?u=http-3A__designdrumm.com&d=
>> AwIC-g&c=4R1YgkJNMyVWjMjneTwN5tJRn8m8VqTSNCjYLg1wNX4&r=pRBqy2P3JaV_0yI
>> qjAsPRpV2yZymYr9X5J_0Y74t654&m=kIedOn0p3VGnUZ1gfYdWWnG5241UJdD7tnYY_Ju
>> HC18&s=ig7LiGzP4X2ZJJMrsq4695g43cu8ghuBAAdEq6F3jrY&e=
> ---
>
> Karl -
>
> Thanks.
>
> The key is already plugged in. Mr [Naive] Nice is using the computer, and is logged in. Mr.
> Ugly just want to "look at" the computer.
>
> Ethan
>
>
>
> --
> PHP Database Mailing List
> (https://urldefense.proofpoint.com/v2/url?u=http-3A__www.php.net_&d=AwIC-g&c=4R1YgkJNMyVWjMjneTwN5tJRn8m8VqTSNCjYLg1wNX4&r=pRBqy2P3JaV_0yIqjAsPRpV2yZymYr9X5J_0Y74t654&m=kIedOn0p3VGnUZ1gfYdWWnG5241UJdD7tnYY_JuHC18&s=saaG6YC7fWss2eAYUsXw7GU0vdZKj74Uz3iVA1Enu40&e=
> ) To unsubscribe, visit:
> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.php.net_unsub.php&d=AwIC-g&c=4R1YgkJNMyVWjMjneTwN5tJRn8m8VqTSNCjYLg1wNX4&r=pRBqy2P3JaV_0yIqjAsPRpV2yZymYr9X5J_0Y74t654&m=kIedOn0p3VGnUZ1gfYdWWnG5241UJdD7tnYY_JuHC18&s=b2pGut3zlmECebRRBhfyRBYokCPeQHk8ZPkcdNA2RzQ&e=
>
>
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>