OT: RE: Security Question

2004-04-26 Thread Tim Johnson
I think this is off-topic for this list. It's more of a cryptography question than a Perl question (and it's not even really a question). -Original Message- From: Jenda Krynicky [mailto:[EMAIL PROTECTED] Sent: Monday, April 26, 2004 3:44 PM To: [EMAIL PROTECTED] Subject: Re

Re: Security Question

2004-04-26 Thread Jenda Krynicky
From: WC -Sx- Jones <[EMAIL PROTECTED]> > Originally I asked this question around 1998, I'd like to see > if anything new has occurred since then because the client I > wrote the security code for which generated this key is *still* > using that application today - > > > Please, decode this key:

Re: Security Question

2004-04-25 Thread drieux
On Apr 23, 2004, at 9:04 PM, WC -Sx- Jones wrote: [..] Please, decode this key: SxEyj/gJs5pXISX11386025 Thank you in advance :) [..] My compliments to your wit. ciao drieux --- -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Security Question

2004-04-23 Thread WC -Sx- Jones
Originally I asked this question around 1998, I'd like to see if anything new has occurred since then because the client I wrote the security code for which generated this key is *still* using that application today - Please, decode this key: SxEyj/gJs5pXISX11386025 Thank you in advance :) -- _

Re: How to secure database password? (was Re: Perl/DBI newbie: password storage / security question)

2003-09-17 Thread Dan Anderson
I think you're complicating an already quite simple thing. 1. Most major databases support permissions. Use these liberally to seperate those who only need access to the database to view contents on a single table and those who should be able to alter one table or one database and ONLY that tabl

How to secure database password? (was Re: Perl/DBI newbie: password storage / security question)

2003-09-17 Thread zedgar
Hello, Many thanks to R. Joseph Newton, Motherofperls, essential quint and Chuck Fox for answering my questions, however it is still not what I was asking about. My previous posts were long and maybe unclear so I'll try to get straight to the point this time, adding more details at the bottom o

Re: How to secure database password? (was Re: Perl/DBI newbie: password storage / security question)

2003-09-17 Thread Chuck Fox
Zedgar, You are chasing the yourself into circles. Security is dictated by circumstances and resources available. In our case, we had plenty of both and developed for our needs the "best" solution. Insofar as the storing of the password for the login that is used to get the password, we too

Re: Perl/DBI newbie: password storage / security question

2003-09-15 Thread Chuck Fox
Zedgar, I have had the opportunity to do what you are attempting in several different ways. 1. Hack Perl, 2. Provide a password access module 1. is not so pretty. Basically, we allocated a global database handle in the perl main. Using SWIG, we then create the database handle in C and u

Re: Perl/DBI newbie: password storage / security question

2003-09-14 Thread essential quint
andpoint. Anyway, I'll leave go now... just thinking out loud... providing some food for thought... etc... Good luck! quint From: [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: Perl/DBI newbie: password storage / security question Date: Sat, 13

Re: Perl/DBI newbie: password storage / security question

2003-09-14 Thread R. Joseph Newton
[EMAIL PROTECTED] wrote: > Thank you Joseph and Motherofperls for your tips, however I need something more than > security through obscurity, as this database is going to store our customers > personal information (real name and contact information) which is absolutely > unacceptable to be stor

Re: Perl/DBI newbie: password storage / security question

2003-09-14 Thread zedgar
R. Joseph Newton wrote: > [EMAIL PROTECTED] wrote: > >>I'm basically concerned about the security of writing a simple web frontend to SQL >>database, the most important question being: how should I store the database >>password? >>[...] >>There are tens of websites on the server and every databa

Re: Perl/DBI newbie: password storage / security question

2003-09-13 Thread R. Joseph Newton
[EMAIL PROTECTED] wrote: > Hello! > > This is probably something trivial, in which case I apologize, however I'm quite new > in Perl and even more so in databases. Actually, I'm quite new in programing at all, > so please don't laugh at me. > > I'm basically concerned about the security of writi

Re: Perl/DBI newbie: password storage / security question

2003-09-13 Thread Motherofperls
I'm new to databasing too, and decided to put this question off till I got the basics down first. My beginners solution was to put the database info in a txt file in my cgi-bin and read the variables into the script. I also set the variables for the info with this code, which I read hides the

Perl/DBI newbie: password storage / security question

2003-09-13 Thread zedgar
Hello! This is probably something trivial, in which case I apologize, however I'm quite new in Perl and even more so in databases. Actually, I'm quite new in programing at all, so please don't laugh at me. I'm basically concerned about the security of writing a simple web frontend to SQL datab

Re: Security question re POST data

2002-04-11 Thread Jenda Krynicky
From: Shaun Fryer <[EMAIL PROTECTED]> > Please take into account that I'm new at this... > > Rather than using CGI.pm, I'm using the following library sub-routine > which was passed to me by a friend (I think from one of the O'Reilly > books). Especialy since you are new at this you should use

Re: Security question re POST data

2002-04-11 Thread Jeff 'japhy' Pinyan
On Apr 5, Shaun Fryer said: >Rather than using CGI.pm, I'm using the following library sub-routine >which was passed to me by a friend (I think from one of the O'Reilly >books). What I'm wondering is if Perl 5 has any built in functionality I highly doubt it was found in an O'Reilly book -- if i

Security question re POST data

2002-04-11 Thread Shaun Fryer
Please take into account that I'm new at this... Rather than using CGI.pm, I'm using the following library sub-routine which was passed to me by a friend (I think from one of the O'Reilly books). What I'm wondering is if Perl 5 has any built in functionality to prevent buffer overruns or excessiv

Re: Security Question (follow-up question)

2001-07-31 Thread smoot
> Bob Mangold <[EMAIL PROTECTED]> said: > This is somewhat alarming to me because I hadn't realized this potential > before, but is there an easy way to check what is being opened. Would using a > -f() or -d() to verify that you were actually opening a file or directory do > the trick? Be mindfu

RE: Security Question (follow-up question)

2001-07-31 Thread Bob Mangold
t; > So don't be afraid to use 'open' if you know exactly what you're opening ... > ;) > > -Original Message- > From: Mooney Christophe-CMOONEY1 > [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, July 31, 2001 9:41 AM > To: Perl Beginners > Subject:

Re: Security Question

2001-07-31 Thread Brett W. McCoy
On Tue, 31 Jul 2001, Customer Service wrote: > I was reading a reply to a question this morning that stated that the open() > call is a big security hole because someone could put in ";rm -rf ." as the > value for $email. > What does ";rm -rf ." do? Why is it so dangerous? rm -rf deletes every

RE: Security Question

2001-07-31 Thread Mooney Christophe-CMOONEY1
. ;) -Original Message- From: Mooney Christophe-CMOONEY1 [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 31, 2001 9:41 AM To: Perl Beginners Subject: RE: Security Question 'rm -rf .' is a unix command that removes everything in the current direcotry PERMANENTLY and UNCONDITION

RE: Security Question

2001-07-31 Thread Mooney Christophe-CMOONEY1
'rm -rf .' is a unix command that removes everything in the current direcotry PERMANENTLY and UNCONDITIONALLY -Original Message- From: Customer Service [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 31, 2001 9:44 AM To: Perl Beginners Subject: Security Question Dear Sirs,

Security Question

2001-07-31 Thread Customer Service
Dear Sirs, I first of all wanted to apologize about sending so many redundant questions to the list. I wasn’t aware that my wife was downloading my mail also and I didn’t see all of your replies to previous questions. Won’t happen again ;-)) I was reading a reply to a question this morning that