Reputation
4,852
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 13 32
Impact
~307k people reached

Nov
12
revised Protecting SQL from Profiling
added 380 characters in body
Nov
12
comment Protecting SQL from Profiling
It depends on what you're protecting but, frankly, it might not be worth the price and complexity. The problem is that you're vulnerable to class-level attacks: a single attacker have to do the work only once to access 100% of your installations (similar to how DRM has to be cracked only once to be rendered obsolete). It means that, unless the obfuscation you're doing is extremely cheap, has extremely low impact on regular users and is easily replaceable, it's probably not cost-effective.
Nov
12
answered Protecting SQL from Profiling
Nov
12
answered Server 2012 file server security - File access through software only?
Nov
8
comment SQL database instance cannot be set to SINGLE_USER
Is the AUTO_UPDATE_STATISTICS_ASYNC option off ? Do you have ALTER DATABASE permission on the database ?
Nov
8
comment SQL database instance cannot be set to SINGLE_USER
the "sql-server" tag relates to MSSQL server. The fact that he's trying to touch the master database confirm this
Nov
7
comment Can I tell IIS to process some requests sequentially and asynchronously?
No can do. Use MSMQ for that.
Nov
7
comment Can I tell IIS to process some requests sequentially and asynchronously?
What are you trying to achieve ?
Oct
30
reviewed Close Determine from where is “sh” being run under apache www-data user using using PF or NETSTAT
Oct
30
reviewed Leave Open Setup NTP on Debian
Oct
30
reviewed Close ifdown interface not configured (Debian 6)
Oct
30
comment How to improve Windows Server 2008 R2 to handle many connections?
I agree with @RyanRies: we're missing something. I would look into the way the ad serving system is built: it could be that there is a dependency between the content and ad serving services that causes the excessive delay.
Oct
30
comment How to improve Windows Server 2008 R2 to handle many connections?
"outdated 2008 R2 which you should update ASAP": that is both incorrect (2008R2 is not "outdated" and shouldn't be updated "just because") and making no sense in the context of the answer. The rest does little to improve your answer since it provide no useful step for identifying the issue, much less fixing it, it just provide generic (and only mildly on topic) advises about performance.
Oct
30
reviewed Close Distributed storage and computing
Oct
30
reviewed Close How to find IIS default port using command prompt?
Oct
30
reviewed Leave Open Windows could not reconnect all network drives
Oct
30
reviewed No Action Needed Adding local users / passwords on Kerberized Linux box
Oct
29
comment IIS web service responds on server, not from remote client
Please, when asking question, take the time to provide the minimum information: OS, software version, etc.
Oct
28
comment Windows Firewall rule based on domain name instead of IP
@Veniamin checking the PTR doesn't really improve security on the principle since you've already decided that DNS has been subverted. There is a mechanism to make DNS secure (well, more secure) that doesn't relies on random assumptions: DNSSEC. Frankly, anyone trying to build a secure solution that relies on DNS being secure should invest in DNSSEC.
Oct
28
comment Fingerprint of PEM ssh key
Then there is nothing you can do about it. You can't get the public half of the key from the private part any more than you can do the reverse.