Collaborate Disseminate
I am working on a application which requires session token to commence trading activities. This will be hosted on a cloud based Linux VM (Ubuntu) and a managed MySQL database.
Session token are generated using a TOTP. I have build this app… Continue reading Storing TOTP keys
So a while ago I was talking to a guy who was a high-up security officer for a big bank, and he told me something interesting. He told me (and this isn’t private information or anything,) that after about five incorrect guesses of the pas… Continue reading At what point does data wipe after incorrect password attempts become reasonable? [closed]
I was working on a target where sqlmap detected boolean based time blind injection. Everything was working perfect but you know it was time blind injection so I knew that this is going to take forever to dump database. So I pressed ctrl+c … Continue reading Accidently used –flush-session –batch in sqlmap tool. Need help!
Ok- so you all probably know that a hash is used to help secure a stored password in a database, if it was stolen.
When a user logs in, and enters a password, it gets hashed, and then matched to a hash in the name of the user that tried to… Continue reading How do databases/companies change their hashing algorithm? [duplicate]
I have a DB that I would like to expose to end users for flexible search through their data. Currently using Elastic, but not tied to that: I can internally transform the data in any way to enable secure, flexible querying.
What I’m curiou… Continue reading Library to securely expose query language to end user?
SQL Server is a relational database. But what is a relational database exactly? Mike Otey, our resident SQL Server expert, explains in this article. What is a relational database? A relational database is a type of data storage mechanism that organizes data into tables where each table consists of rows and columns. It is typically…
The post SQL Server Essentials: What Is a Relational Database? appeared first on Petri IT Knowledgebase.
Continue reading SQL Server Essentials: What Is a Relational Database?
I have implemented OAuth2 for a web app. Everything is stored in the session, and I am switching this to a database. This makes sense for the subject and roles, but it also includes the temporary values like state and the redirect uri that… Continue reading OAuth2: Storing temp values in session vs database
I have implemented OAuth2 for a web app. Everything is stored in the session, and I am switching this to a database. This makes sense for the subject and roles, but it also includes the temporary values like state and the redirect uri that… Continue reading OAuth2: Storing temp values in session vs database
Some services like ejabberd, nginx for authenticating using a database, and dovecot requires providing the database password as plain text in the configuration file. Is it safe to store MariaDB password as plain text provided that processe… Continue reading Is it safe to store database credentials as plain text in the configuration file?
I’m working on a project where we aim to have a separate database for each tenant. In our setup, there is a central database (and API) containing a "users" table that stores usernames and passwords for all users. Additionally, th… Continue reading How to keep membership in sync in a multi tenant architecture with per tenant database?